corsair 0.1.31 → 0.1.33

package/dist/core/auth/key-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../../core/auth/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAS9C,OAAO,KAAK,EAEX,oBAAoB,EAEpB,wBAAwB,EAExB,MAAM,SAAS,CAAC;AAsDjB,MAAM,MAAM,4BAA4B,CAAC,CAAC,SAAS,SAAS,IAAI;IAC/D,QAAQ,EAAE,CAAC,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC;IAC1B,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,SAAS,EAC9D,OAAO,EAAE,4BAA4B,CAAC,CAAC,CAAC,GACtC,wBAAwB,CAAC,CAAC,CAAC,CAqJ7B;AAMD,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,SAAS,IAAI;IAC3D,QAAQ,EAAE,CAAC,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,SAAS,EAC1D,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAClC,oBAAoB,CAAC,CAAC,CAAC,CAsOzB;AAMD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC7C,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,MAAM,EACvB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACzC,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAqCjB"}
+{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../../core/auth/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAS9C,OAAO,KAAK,EAEX,oBAAoB,EAEpB,wBAAwB,EAExB,MAAM,SAAS,CAAC;AAyDjB,MAAM,MAAM,4BAA4B,CAAC,CAAC,SAAS,SAAS,IAAI;IAC/D,QAAQ,EAAE,CAAC,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC;IAC1B,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,SAAS,EAC9D,OAAO,EAAE,4BAA4B,CAAC,CAAC,CAAC,GACtC,wBAAwB,CAAC,CAAC,CAAC,CA2J7B;AAMD,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,SAAS,IAAI;IAC3D,QAAQ,EAAE,CAAC,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,SAAS,EAC1D,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAClC,oBAAoB,CAAC,CAAC,CAAC,CA4OzB;AAMD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC7C,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,MAAM,EACvB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACzC,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAqCjB"}

package/dist/core.js

@@ -497,7 +497,8 @@ function createFieldAccessors(getDecryptedConfig, updateConfig, fields) {
       return config[field] ?? null;
     };
     accessors[`set_${field}`] = async (value) => {
-      await updateConfig({ [field]: value });
+      const normalized = [null, void 0, ""].includes(value) ? null : value;
+      await updateConfig({ [field]: normalized });
     };
   }
   return accessors;
@@ -577,7 +578,13 @@ function createIntegrationKeyManager(options) {
   };
   const updateConfig = async (updates) => {
     const dek = await getDecryptedDek();
-    const currentConfig = await getDecryptedConfig();
+    let currentConfig;
+    try {
+      currentConfig = await getDecryptedConfig();
+    } catch (err) {
+      console.error(`[corsair] Failed to decrypt config for integration "${integrationName}", starting fresh:`, err);
+      currentConfig = {};
+    }
     const newConfig = { ...currentConfig };
     for (const [key, value] of Object.entries(updates)) {
       if (value === null) {
@@ -720,7 +727,13 @@ function createAccountKeyManager(options) {
   };
   const updateConfig = async (updates) => {
     const dek = await getDecryptedDek();
-    const currentConfig = await getDecryptedConfig();
+    let currentConfig;
+    try {
+      currentConfig = await getDecryptedConfig();
+    } catch (err) {
+      console.error(`[corsair] Failed to decrypt config for account (tenant: "${tenantId}", integration: "${integrationName}"), starting fresh:`, err);
+      currentConfig = {};
+    }
     const newConfig = { ...currentConfig };
     for (const [key, value] of Object.entries(updates)) {
       if (value === null) {

package/dist/index.js

@@ -509,7 +509,8 @@ function createFieldAccessors(getDecryptedConfig, updateConfig, fields) {
       return config[field] ?? null;
     };
     accessors[`set_${field}`] = async (value) => {
-      await updateConfig({ [field]: value });
+      const normalized = [null, void 0, ""].includes(value) ? null : value;
+      await updateConfig({ [field]: normalized });
     };
   }
   return accessors;
@@ -589,7 +590,13 @@ function createIntegrationKeyManager(options) {
   };
   const updateConfig = async (updates) => {
     const dek = await getDecryptedDek();
-    const currentConfig = await getDecryptedConfig();
+    let currentConfig;
+    try {
+      currentConfig = await getDecryptedConfig();
+    } catch (err) {
+      console.error(`[corsair] Failed to decrypt config for integration "${integrationName}", starting fresh:`, err);
+      currentConfig = {};
+    }
     const newConfig = { ...currentConfig };
     for (const [key, value] of Object.entries(updates)) {
       if (value === null) {
@@ -732,7 +739,13 @@ function createAccountKeyManager(options) {
   };
   const updateConfig = async (updates) => {
     const dek = await getDecryptedDek();
-    const currentConfig = await getDecryptedConfig();
+    let currentConfig;
+    try {
+      currentConfig = await getDecryptedConfig();
+    } catch (err) {
+      console.error(`[corsair] Failed to decrypt config for account (tenant: "${tenantId}", integration: "${integrationName}"), starting fresh:`, err);
+      currentConfig = {};
+    }
     const newConfig = { ...currentConfig };
     for (const [key, value] of Object.entries(updates)) {
       if (value === null) {
@@ -35714,6 +35727,15 @@ var backfill_default = { "slack": { "channels": { "list": {} }, "users": { "list
 
 // setup/index.ts
 async function setupCorsair(corsair, options) {
+  const messages = [];
+  const log = (msg) => {
+    messages.push(msg);
+    console.log(msg);
+  };
+  const warn = (msg) => {
+    messages.push(msg);
+    console.warn(msg);
+  };
   const internal = corsair[CORSAIR_INTERNAL];
   if (!internal) {
     throw new Error("setupCorsair: invalid corsair instance");
@@ -35734,17 +35756,19 @@ async function setupCorsair(corsair, options) {
     database: internal.database.db,
     kek: internal.kek
   });
-  await checkTables(db);
+  await checkTables(db, warn);
   const authReadyPlugins = await ensurePluginRows(
     db,
     instance,
-    internal.plugins
+    internal.plugins,
+    log
   );
   if (options?.backfill) {
-    console.log("[corsair:setup] Starting backfill...");
-    await runBackfill(instance, internal.plugins, authReadyPlugins);
-    console.log("[corsair:setup] Backfill complete.");
+    log("[corsair:setup] Starting backfill...");
+    await runBackfill(instance, internal.plugins, authReadyPlugins, log, warn);
+    log("[corsair:setup] Backfill complete.");
   }
+  return messages.join("\n");
 }
 var REQUIRED_TABLES = {
   ...TABLE_SCHEMAS
@@ -35774,12 +35798,12 @@ function describeZodSchema(schema) {
   if (schema instanceof ZodRecord) return "Record<string, unknown>";
   return "unknown";
 }
-async function checkTables(db) {
+async function checkTables(db, warn) {
   const existing = await db.introspection.getTables();
   const existingNames = new Set(existing.map((t) => t.name));
   for (const [table, schema] of Object.entries(REQUIRED_TABLES)) {
     if (!existingNames.has(table)) {
-      console.warn(
+      warn(
         `[corsair:setup] Table "${table}" does not exist. Run your database migrations before calling setupCorsair.
 Schema: ${JSON.stringify(describeZodSchema(schema), null, 2)}`
       );
@@ -35792,7 +35816,7 @@ var OPTIONAL_FIELDS = /* @__PURE__ */ new Set([
   "scope",
   "redirect_url"
 ]);
-async function checkAuthStatus(pluginId, authType, integrationKeyMgr, accountKeyMgr) {
+async function checkAuthStatus(pluginId, authType, integrationKeyMgr, accountKeyMgr, log) {
   const missingIntegration = [];
   const missingAccount = [];
   for (const key of Object.keys(integrationKeyMgr)) {
@@ -35832,12 +35856,12 @@ async function checkAuthStatus(pluginId, authType, integrationKeyMgr, accountKey
     for (const field of missingAccount) {
       lines.push(`  corsair.${pluginId}.keys.set_${field}(value)`);
     }
-    console.log(lines.join("\n"));
+    log(lines.join("\n"));
   }
   return isReady;
 }
 var TENANT_ID = "default";
-async function ensurePluginRows(db, instance, plugins) {
+async function ensurePluginRows(db, instance, plugins, log) {
   const now = /* @__PURE__ */ new Date();
   const authReadyPlugins = /* @__PURE__ */ new Set();
   const integrationKeys = instance.keys;
@@ -35856,12 +35880,12 @@ async function ensurePluginRows(db, instance, plugins) {
         updated_at: now
       }).execute();
       integration = await db.selectFrom("corsair_integrations").selectAll().where("id", "=", id).executeTakeFirst();
-      console.log(`[corsair:setup] Created integration: ${pluginId}`);
+      log(`[corsair:setup] Created integration: ${pluginId}`);
     }
     const integrationKeyMgr = integrationKeys[pluginId];
     if (integration && !integration.dek && integrationKeyMgr) {
       await integrationKeyMgr.issue_new_dek();
-      console.log(`[corsair:setup] Issued integration DEK: ${pluginId}`);
+      log(`[corsair:setup] Issued integration DEK: ${pluginId}`);
     }
     if (!integration) continue;
     let account = await db.selectFrom("corsair_accounts").selectAll().where("tenant_id", "=", TENANT_ID).where("integration_id", "=", integration.id).executeTakeFirst();
@@ -35876,33 +35900,34 @@ async function ensurePluginRows(db, instance, plugins) {
         updated_at: now
       }).execute();
       account = await db.selectFrom("corsair_accounts").selectAll().where("id", "=", id).executeTakeFirst();
-      console.log(`[corsair:setup] Created account: ${pluginId}`);
+      log(`[corsair:setup] Created account: ${pluginId}`);
     }
     const accountKeyMgr = pluginNamespaces[pluginId]?.keys;
     if (account && !account.dek && accountKeyMgr) {
       await accountKeyMgr.issue_new_dek();
-      console.log(`[corsair:setup] Issued account DEK: ${pluginId}`);
+      log(`[corsair:setup] Issued account DEK: ${pluginId}`);
     }
     if (integrationKeyMgr && accountKeyMgr) {
       const isReady = await checkAuthStatus(
         pluginId,
         authType,
         integrationKeyMgr,
-        accountKeyMgr
+        accountKeyMgr,
+        log
       );
       if (isReady) authReadyPlugins.add(pluginId);
     }
   }
   return authReadyPlugins;
 }
-async function runBackfill(instance, plugins, authReadyPlugins) {
+async function runBackfill(instance, plugins, authReadyPlugins, log, warn) {
   const config = backfill_default;
   const activePluginIds = new Set(plugins.map((p) => p.id));
   const instanceRecord = instance;
   for (const [pluginId, groups] of Object.entries(config)) {
     if (!activePluginIds.has(pluginId)) continue;
     if (!authReadyPlugins.has(pluginId)) {
-      console.log(
+      log(
         `[corsair:setup] Skipping backfill for '${pluginId}' \u2014 auth not configured.`
       );
       continue;
@@ -35911,15 +35936,14 @@ async function runBackfill(instance, plugins, authReadyPlugins) {
     if (!api) continue;
     for (const [group, methods] of Object.entries(groups)) {
       for (const [method, params] of Object.entries(methods)) {
-        console.log(
+        log(
           `[corsair:setup] Backfilling ${pluginId} \u203A ${group}.${method}...`
         );
         try {
           await api[group]?.[method]?.(params);
         } catch (error) {
-          console.warn(
-            `[corsair:setup] ${pluginId} \u203A ${group}.${method} failed:`,
-            error instanceof Error ? error.message : error
+          warn(
+            `[corsair:setup] ${pluginId} \u203A ${group}.${method} failed: ` + (error instanceof Error ? error.message : String(error))
           );
         }
       }

package/dist/setup/index.d.ts

@@ -23,6 +23,9 @@ export interface SetupCorsairOptions {
  *    `setup/backfill.yaml` for each plugin that has auth configured.
  *
  * Only single-tenant corsair instances are accepted.
+ *
+ * Returns a newline-separated string of all setup output (credential instructions, etc.).
+ * Use this when invoking from MCP tools so the agent receives the instructions.
  */
-export declare function setupCorsair<const Plugins extends readonly CorsairPlugin[]>(corsair: CorsairSingleTenantClient<Plugins>, options?: SetupCorsairOptions): Promise<void>;
+export declare function setupCorsair<const Plugins extends readonly CorsairPlugin[]>(corsair: CorsairSingleTenantClient<Plugins>, options?: SetupCorsairOptions): Promise<string>;
 //# sourceMappingURL=index.d.ts.map

package/dist/setup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../setup/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEX,aAAa,EACb,yBAAyB,EACzB,MAAM,SAAS,CAAC;AAqBjB,MAAM,WAAW,mBAAmB;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CACjC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAC3C,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiDf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../setup/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEX,aAAa,EACb,yBAAyB,EACzB,MAAM,SAAS,CAAC;AAqBjB,MAAM,WAAW,mBAAmB;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAUD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,YAAY,CACjC,KAAK,CAAC,OAAO,SAAS,SAAS,aAAa,EAAE,EAE9C,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAC3C,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CA6DjB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "corsair",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "",
   "type": "module",
   "main": "./dist/index.js",