edgegate-mcp 0.9.1 → 0.11.0

package/dist/tools/llm_compile.js

@@ -0,0 +1,111 @@
+import { z } from "zod";
+import { EdgeGateError } from "../client.js";
+export const llmCompileInputSchema = z.object({
+    workspace_id: z.string().uuid(),
+    /**
+     * Pre-uploaded source artifacts (1 per component). Typical Llama-class:
+     * 3 artifacts (prompt + token + kv_cache). For other architectures pass
+     * M artifacts matching the number of components.
+     */
+    source_artifact_ids: z.array(z.string().uuid()).min(1).max(8),
+    /** AI Hub device id (e.g. "x_elite", "x2_elite", "sa8295p"). */
+    device_id: z.string().min(1),
+    /**
+     * Label only — backend always compiles to QNN_DLC under the hood. The
+     * label is used downstream for profile dispatch hints.
+     */
+    target_runtime: z.string().min(1).default("genie"),
+    /** Default [128, 1] — typical prompt/token split for Llama-class. */
+    sequence_lengths: z.array(z.number().int().positive()).default([128, 1]),
+    /** Default [4096]. */
+    context_lengths: z.array(z.number().int().positive()).default([4096]),
+    /**
+     * Per-component role labels (e.g. ["prompt", "token", "kv_cache"]).
+     * Required when source_artifact_ids has >1 entry — the AI Hub SDK
+     * mandates graph_names for multi-component compiles.
+     */
+    roles: z.array(z.string().min(1)).optional(),
+});
+export async function llmCompileHandler(client, input) {
+    // Client-side guard: roles required when multi-component. Surface the
+    // same constraint the backend enforces so the agent gets a clean error
+    // without a network round-trip.
+    if (input.source_artifact_ids.length > 1 && (!input.roles || input.roles.length === 0)) {
+        return {
+            isError: true,
+            content: [
+                {
+                    type: "text",
+                    text: `'roles' is required when source_artifact_ids has more than 1 entry ` +
+                        `(the AI Hub SDK requires graph_names for multi-component compiles). ` +
+                        `Typical Llama-class: roles=["prompt", "token", "kv_cache"].`,
+                },
+            ],
+        };
+    }
+    if (input.roles && input.roles.length !== input.source_artifact_ids.length) {
+        return {
+            isError: true,
+            content: [
+                {
+                    type: "text",
+                    text: `'roles' length (${input.roles.length}) must match source_artifact_ids ` +
+                        `length (${input.source_artifact_ids.length}).`,
+                },
+            ],
+        };
+    }
+    try {
+        const job = await client.submitLLMCompile(input.workspace_id, {
+            source_artifact_ids: input.source_artifact_ids,
+            device_id: input.device_id,
+            target_runtime: input.target_runtime,
+            sequence_lengths: input.sequence_lengths,
+            context_lengths: input.context_lengths,
+            ...(input.roles !== undefined ? { roles: input.roles } : {}),
+        });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: [
+                        `LLM compile job submitted.`,
+                        ``,
+                        `- compile_job_id: ${job.compile_job_id}`,
+                        `- status: ${job.status}`,
+                        `- components: ${input.source_artifact_ids.length}`,
+                        `- device: ${input.device_id}`,
+                        `- target_runtime: ${input.target_runtime} (compiled to QNN_DLC under the hood)`,
+                        ``,
+                        `Poll status with:`,
+                        `  edgegate_check_llm_compile_status({ workspace_id: "${input.workspace_id}", compile_job_id: "${job.compile_job_id}" })`,
+                        ``,
+                        `When status=completed, composite_artifact_id is the QNN_DLC linked model ready to use in a pipeline.`,
+                    ].join("\n"),
+                },
+            ],
+        };
+    }
+    catch (err) {
+        if (err instanceof EdgeGateError) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: err.status === 402
+                            ? `Your workspace has hit its monthly LLM compile cap (default 100/mo on Pro). ` +
+                                `Upgrade at https://edgegate.frozo.ai/pricing or wait until next billing cycle.\n\n` +
+                                `Detail: ${err.detail}`
+                            : err.status === 401
+                                ? "EDGEGATE_API_KEY is missing, expired, or revoked. Generate a fresh key at " +
+                                    "https://edgegate.frozo.ai/workspace/<id>/settings#api-keys and retry."
+                                : `EdgeGate returned ${err.status}: ${err.detail}`,
+                    },
+                ],
+            };
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=llm_compile.js.map

package/dist/tools/llm_compile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm_compile.js","sourceRoot":"","sources":["../../src/tools/llm_compile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,gEAAgE;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAClD,qEAAqE;IACrE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxE,sBAAsB;IACtB,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,KAAsB;IAEtB,sEAAsE;IACtE,uEAAuE;IACvE,gCAAgC;IAChC,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,qEAAqE;wBACrE,sEAAsE;wBACtE,6DAA6D;iBAChE;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,mBAAmB,KAAK,CAAC,KAAK,CAAC,MAAM,mCAAmC;wBACxE,WAAW,KAAK,CAAC,mBAAmB,CAAC,MAAM,IAAI;iBAClD;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE;YAC5D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE;wBACJ,4BAA4B;wBAC5B,EAAE;wBACF,qBAAqB,GAAG,CAAC,cAAc,EAAE;wBACzC,aAAa,GAAG,CAAC,MAAM,EAAE;wBACzB,iBAAiB,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE;wBACnD,aAAa,KAAK,CAAC,SAAS,EAAE;wBAC9B,qBAAqB,KAAK,CAAC,cAAc,uCAAuC;wBAChF,EAAE;wBACF,mBAAmB;wBACnB,wDAAwD,KAAK,CAAC,YAAY,uBAAuB,GAAG,CAAC,cAAc,MAAM;wBACzH,EAAE;wBACF,sGAAsG;qBACvG,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,GAAG,CAAC,MAAM,KAAK,GAAG;4BAChB,CAAC,CAAC,8EAA8E;gCAC9E,oFAAoF;gCACpF,WAAW,GAAG,CAAC,MAAM,EAAE;4BACzB,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;gCAClB,CAAC,CAAC,4EAA4E;oCAC5E,uEAAuE;gCACzE,CAAC,CAAC,qBAAqB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE;qBACzD;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/tools/register_byo_bucket.js

@@ -115,7 +115,12 @@ function successText(grant) {
                 text: [
                     `Registered BYO storage grant for this workspace.`,
                     ``,
-                    `- role: \`${roleArnTail(grant.role_arn)}\``,
+                    // role_arn can be null on pending_role grants, but the
+                    // register_byo_bucket tool requires role_arn in its input — so
+                    // a successful response from this tool's endpoint always has a
+                    // populated role_arn. Fall through to a safe default so the
+                    // type system is satisfied for the null-tolerant ByoGrant shape.
+                    `- role: \`${roleArnTail(grant.role_arn ?? "(not attached)")}\``,
                     `- bucket: \`${grant.bucket}\` (${grant.region})`,
                     grant.kms_key_id
                         ? `- kms key: \`${grant.kms_key_id}\``

package/dist/tools/register_byo_bucket.js.map

@@ -1 +1 @@
-{"version":3,"file":"register_byo_bucket.js","sourceRoot":"","sources":["../../src/tools/register_byo_bucket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,gCAAgC,CAAC;SACvC,QAAQ,CACP,0EAA0E;QACxE,0EAA0E;QAC1E,mEAAmE,CACtE;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,CAAC,sDAAsD,CAAC;IACnE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,qEAAqE;QACnE,+BAA+B,CAClC;CACJ,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAsB,EACtB,KAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE;YAC9D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,+CAA+C;gCAC/C,EAAE;gCACF,6DAA6D;oCAC3D,2CAA2C;oCAC3C,iEAAiE;oCACjE,6BAA6B;6BAChC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,8DAA8D;gBAC9D,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,4DAA4D;gCAC5D,EAAE;gCACF,yBAAyB;gCACzB,mEAAmE;oCACjE,uCAAuC;gCACzC,mEAAmE;oCACjE,gEAAgE;oCAChE,4DAA4D;gCAC9D,EAAE;gCACF,kEAAkE;oCAChE,uBAAuB;oCACvB,uCAAuC,KAAK,CAAC,YAAY,wBAAwB;6BACpF,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qBAAqB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE;qBACvD;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,2DAA2D;IAC3D,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,GAAG,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,kDAAkD;oBAClD,EAAE;oBACF,aAAa,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;oBAC5C,eAAe,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,GAAG;oBACjD,KAAK,CAAC,UAAU;wBACd,CAAC,CAAC,gBAAgB,KAAK,CAAC,UAAU,IAAI;wBACtC,CAAC,CAAC,6CAA6C;oBACjD,eAAe,KAAK,CAAC,MAAM,IAAI;oBAC/B,oBAAoB,KAAK,CAAC,WAAW,IAAI;oBACzC,EAAE;oBACF,sEAAsE;wBACpE,gFAAgF;wBAChF,+DAA+D;oBACjE,EAAE;oBACF,KAAK,CAAC,MAAM,KAAK,QAAQ;wBACvB,CAAC,CAAC,wEAAwE;4BACxE,0CAA0C;wBAC5C,CAAC,CAAC,KAAK,CAAC,iBAAiB;4BACvB,CAAC,CAAC,iCAAiC,KAAK,CAAC,iBAAiB,cAAc;gCACtE,mDAAmD;gCACnD,gCAAgC;4BAClC,CAAC,CAAC,sEAAsE;iBAC7E,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"register_byo_bucket.js","sourceRoot":"","sources":["../../src/tools/register_byo_bucket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,gCAAgC,CAAC;SACvC,QAAQ,CACP,0EAA0E;QACxE,0EAA0E;QAC1E,mEAAmE,CACtE;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,CAAC,sDAAsD,CAAC;IACnE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,qEAAqE;QACnE,+BAA+B,CAClC;CACJ,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAsB,EACtB,KAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE;YAC9D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,+CAA+C;gCAC/C,EAAE;gCACF,6DAA6D;oCAC3D,2CAA2C;oCAC3C,iEAAiE;oCACjE,6BAA6B;6BAChC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,8DAA8D;gBAC9D,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,4DAA4D;gCAC5D,EAAE;gCACF,yBAAyB;gCACzB,mEAAmE;oCACjE,uCAAuC;gCACzC,mEAAmE;oCACjE,gEAAgE;oCAChE,4DAA4D;gCAC9D,EAAE;gCACF,kEAAkE;oCAChE,uBAAuB;oCACvB,uCAAuC,KAAK,CAAC,YAAY,wBAAwB;6BACpF,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qBAAqB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE;qBACvD;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,2DAA2D;IAC3D,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,GAAG,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,kDAAkD;oBAClD,EAAE;oBACF,uDAAuD;oBACvD,+DAA+D;oBAC/D,+DAA+D;oBAC/D,4DAA4D;oBAC5D,iEAAiE;oBACjE,aAAa,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC,IAAI;oBAChE,eAAe,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,GAAG;oBACjD,KAAK,CAAC,UAAU;wBACd,CAAC,CAAC,gBAAgB,KAAK,CAAC,UAAU,IAAI;wBACtC,CAAC,CAAC,6CAA6C;oBACjD,eAAe,KAAK,CAAC,MAAM,IAAI;oBAC/B,oBAAoB,KAAK,CAAC,WAAW,IAAI;oBACzC,EAAE;oBACF,sEAAsE;wBACpE,gFAAgF;wBAChF,+DAA+D;oBACjE,EAAE;oBACF,KAAK,CAAC,MAAM,KAAK,QAAQ;wBACvB,CAAC,CAAC,wEAAwE;4BACxE,0CAA0C;wBAC5C,CAAC,CAAC,KAAK,CAAC,iBAAiB;4BACvB,CAAC,CAAC,iCAAiC,KAAK,CAAC,iBAAiB,cAAc;gCACtE,mDAAmD;gCACnD,gCAAgC;4BAClC,CAAC,CAAC,sEAAsE;iBAC7E,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/setup_byo_storage.d.ts

@@ -0,0 +1,44 @@
+/**
+ * edgegate_setup_byo_storage — zero-friction BYO setup orchestrator.
+ *
+ * Why this tool exists: the dashboard wizard's CloudFormation deep link
+ * silently fails when the template isn't S3-hosted (an AWS console
+ * limitation), and the Guided Steps walkthrough still asks the customer to
+ * click through the IAM console. An MCP-aware agent with shell access can
+ * do the entire flow autonomously — this tool registers a pending grant
+ * with EdgeGate (so the agent has the right External ID + EdgeGate
+ * principal ARN), then returns the exact AWS CLI commands the agent should
+ * run to create the role, plus a follow-up instruction to call
+ * edgegate_attach_byo_role with the resulting ARN.
+ *
+ * Design choice: we return INSTRUCTIONS rather than executing AWS calls
+ * from inside the MCP server. Two reasons:
+ *   1. Transparency — the user sees every AWS command the agent runs;
+ *      they can intervene if something looks off.
+ *   2. Footprint — the MCP package stays small (no aws-sdk dependency).
+ *      The user's local AWS CLI is already configured; we use it.
+ */
+import { z } from "zod";
+import { EdgeGateClient } from "../client.js";
+import type { ToolResult } from "./setup_workspace.js";
+export declare const setupByoStorageInputSchema: z.ZodObject<{
+    workspace_id: z.ZodString;
+    bucket: z.ZodString;
+    region: z.ZodString;
+    kms_key_id: z.ZodOptional<z.ZodString>;
+    role_name_override: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspace_id: string;
+    bucket: string;
+    region: string;
+    kms_key_id?: string | undefined;
+    role_name_override?: string | undefined;
+}, {
+    workspace_id: string;
+    bucket: string;
+    region: string;
+    kms_key_id?: string | undefined;
+    role_name_override?: string | undefined;
+}>;
+export type SetupByoStorageInput = z.infer<typeof setupByoStorageInputSchema>;
+export declare function setupByoStorageHandler(client: EdgeGateClient, input: SetupByoStorageInput): Promise<ToolResult>;

package/dist/tools/setup_byo_storage.js

@@ -0,0 +1,247 @@
+/**
+ * edgegate_setup_byo_storage — zero-friction BYO setup orchestrator.
+ *
+ * Why this tool exists: the dashboard wizard's CloudFormation deep link
+ * silently fails when the template isn't S3-hosted (an AWS console
+ * limitation), and the Guided Steps walkthrough still asks the customer to
+ * click through the IAM console. An MCP-aware agent with shell access can
+ * do the entire flow autonomously — this tool registers a pending grant
+ * with EdgeGate (so the agent has the right External ID + EdgeGate
+ * principal ARN), then returns the exact AWS CLI commands the agent should
+ * run to create the role, plus a follow-up instruction to call
+ * edgegate_attach_byo_role with the resulting ARN.
+ *
+ * Design choice: we return INSTRUCTIONS rather than executing AWS calls
+ * from inside the MCP server. Two reasons:
+ *   1. Transparency — the user sees every AWS command the agent runs;
+ *      they can intervene if something looks off.
+ *   2. Footprint — the MCP package stays small (no aws-sdk dependency).
+ *      The user's local AWS CLI is already configured; we use it.
+ */
+import { z } from "zod";
+import { EdgeGateError } from "../client.js";
+export const setupByoStorageInputSchema = z.object({
+    workspace_id: z
+        .string()
+        .uuid()
+        .describe("Workspace ID. Must be Enterprise-tier with BYO storage enabled."),
+    bucket: z
+        .string()
+        .min(3)
+        .max(255)
+        .regex(/^[a-z0-9][a-z0-9\-.]{1,253}$/)
+        .describe("S3 bucket name (not the URI) you want EdgeGate to read model bytes from."),
+    region: z
+        .string()
+        .min(4)
+        .max(64)
+        .describe("AWS region the bucket lives in, e.g. us-east-1."),
+    kms_key_id: z
+        .string()
+        .max(2048)
+        .optional()
+        .describe("Optional KMS key ARN if the bucket uses SSE-KMS with a customer-managed key. " +
+        "The IAM role will be granted kms:Decrypt on this key. " +
+        "Leave unset for SSE-S3 or SSE-KMS with the AWS-managed key."),
+    role_name_override: z
+        .string()
+        .max(64)
+        .optional()
+        .describe("Optional override for the IAM role name. Default mirrors the CloudFormation " +
+        "path: edgegate-byo-read-<first-8-chars-of-external-id>."),
+});
+export async function setupByoStorageHandler(client, input) {
+    try {
+        // 1. Fetch the EdgeGate principal ARN — fail loudly if the deployment
+        //    isn't configured. Templates would contain placeholder strings
+        //    that AWS would reject, so it's better to surface the operator-side
+        //    misconfiguration here than create a broken role.
+        const setupInfo = await client.getByoSetupInfo(input.workspace_id);
+        if (setupInfo.edgegate_aws_account_id.includes("<")) {
+            return errorText("This EdgeGate deployment isn't fully configured for BYO storage — " +
+                "BYO_EDGEGATE_AWS_ACCOUNT_ID is missing on the operator side. Setup " +
+                "cannot proceed until the EdgeGate operator sets that env var. " +
+                "Contact support@edgegate.ai.");
+        }
+        // 2. Register the pending grant (no role_arn yet). If a grant already
+        //    exists in pending_role, re-use it; in active/failed, instruct the
+        //    customer to disconnect first (we don't auto-rotate).
+        let grant;
+        try {
+            grant = await client.registerByoPendingGrant(input.workspace_id, {
+                bucket: input.bucket,
+                region: input.region,
+                kms_key_id: input.kms_key_id,
+            });
+        }
+        catch (err) {
+            if (err instanceof EdgeGateError && err.status === 409) {
+                // The 409 path: either a pending_role grant exists (which we re-use
+                // by GET-ing it), or an active/failed grant exists (which the
+                // customer must explicitly disconnect first). The GET tells us which.
+                const existing = await client.getByoGrant(input.workspace_id);
+                if (existing.status === "pending_role") {
+                    grant = existing;
+                }
+                else {
+                    return errorText(`This workspace already has a BYO grant in status "${existing.status}". ` +
+                        `Setup is for new grants. Two safe paths:\n` +
+                        `1. If the existing grant is the one you want, call edgegate_check_byo_bucket to re-verify it.\n` +
+                        `2. If you want to replace it, call edgegate_disconnect_byo_bucket first (will 409 if artifacts still reference it), then re-run this tool.`);
+                }
+            }
+            else if (err instanceof EdgeGateError && err.status === 402) {
+                return errorText("BYO storage requires the Enterprise plan. Reach out to " +
+                    "sales@edgegate.ai to enable it on this workspace.");
+            }
+            else {
+                throw err;
+            }
+        }
+        // 3. Render the trust + permission policies. We mirror the backend
+        //    templates locally instead of using the server-rendered strings
+        //    (which still have placeholders) so the agent gets ready-to-paste
+        //    JSON.
+        const principalMatch = /^arn:aws:iam::(\d{12}):(user|role)\/(.+)$/.exec(setupInfo.edgegate_principal_arn);
+        if (!principalMatch) {
+            return errorText(`EdgeGate returned an unexpected principal ARN: ${setupInfo.edgegate_principal_arn}. ` +
+                `This usually means an operator-side misconfiguration. Contact support.`);
+        }
+        const trustPolicy = renderTrustPolicy({
+            principalArn: setupInfo.edgegate_principal_arn,
+            externalId: grant.external_id,
+        });
+        const permissionPolicy = renderPermissionPolicy({
+            bucket: input.bucket,
+            kmsKeyArn: input.kms_key_id,
+        });
+        const roleName = input.role_name_override ??
+            `edgegate-byo-read-${grant.external_id.slice(0, 8)}`;
+        return successText({
+            grant,
+            setupInfo,
+            roleName,
+            trustPolicy: JSON.stringify(trustPolicy, null, 2),
+            permissionPolicy: JSON.stringify(permissionPolicy, null, 2),
+        });
+    }
+    catch (err) {
+        if (err instanceof EdgeGateError) {
+            return errorText(`EdgeGate returned ${err.status}: ${err.detail}`);
+        }
+        throw err;
+    }
+}
+function successText(args) {
+    // We embed the shell commands as fenced blocks so the agent can lift them
+    // verbatim into its Bash tool. Naming the trust/perm files under /tmp/ is
+    // intentional — they contain no secrets and are convenient to inspect if
+    // the customer wants to verify before running. The grant's External ID is
+    // already in the trust policy JSON; no separate secret-handling needed.
+    const { grant, roleName, trustPolicy, permissionPolicy } = args;
+    const trustFile = `/tmp/edgegate-trust-${grant.external_id.slice(0, 8)}.json`;
+    const permFile = `/tmp/edgegate-perm-${grant.external_id.slice(0, 8)}.json`;
+    return {
+        content: [
+            {
+                type: "text",
+                text: [
+                    `Pending BYO grant created. Now run these commands to create the IAM role in the customer's AWS account, then call \`edgegate_attach_byo_role\` with the resulting ARN.`,
+                    ``,
+                    `**Grant details (for the customer's confirmation):**`,
+                    `- workspace: \`${grant.workspace_id}\``,
+                    `- bucket: \`s3://${grant.bucket}\` (${grant.region})`,
+                    grant.kms_key_id ? `- kms key: \`${grant.kms_key_id}\`` : `- kms key: (none)`,
+                    `- external_id: \`${grant.external_id}\` (baked into the trust policy below)`,
+                    `- suggested role name: \`${roleName}\``,
+                    ``,
+                    `**Step 1 — verify AWS credentials and account:**`,
+                    "```bash",
+                    `aws sts get-caller-identity`,
+                    "```",
+                    ``,
+                    `**Step 2 — write the policy documents to /tmp:**`,
+                    "```bash",
+                    `cat > ${trustFile} <<'JSON'`,
+                    trustPolicy,
+                    `JSON`,
+                    ``,
+                    `cat > ${permFile} <<'JSON'`,
+                    permissionPolicy,
+                    `JSON`,
+                    "```",
+                    ``,
+                    `**Step 3 — create the role and attach the inline policy:**`,
+                    "```bash",
+                    `aws iam create-role \\`,
+                    `  --role-name ${roleName} \\`,
+                    `  --assume-role-policy-document file://${trustFile} \\`,
+                    `  --description "Allows EdgeGate read access to s3://${grant.bucket}" \\`,
+                    `  --tags Key=edgegate:workspace_id,Value=${grant.workspace_id} \\`,
+                    `         Key=edgegate:external_id,Value=${grant.external_id} \\`,
+                    `         Key=edgegate:bucket,Value=${grant.bucket}`,
+                    ``,
+                    `aws iam put-role-policy \\`,
+                    `  --role-name ${roleName} \\`,
+                    `  --policy-name EdgeGateReadModels \\`,
+                    `  --policy-document file://${permFile}`,
+                    ``,
+                    `# Capture the ARN for the next step:`,
+                    `aws iam get-role --role-name ${roleName} --query 'Role.Arn' --output text`,
+                    "```",
+                    ``,
+                    `**Step 4 — finalize with EdgeGate:**`,
+                    ``,
+                    `Take the Role ARN from Step 3 and call:`,
+                    ``,
+                    "```",
+                    `edgegate_attach_byo_role(workspace_id="${grant.workspace_id}", role_arn="<paste-arn-here>")`,
+                    "```",
+                    ``,
+                    `EdgeGate will run its readiness probe (sts:AssumeRole + a deny-by-default HEAD) and flip the grant to "active" on success, or "failed" with a typed error code if the role doesn't have the right trust/permission policy.`,
+                    ``,
+                    `**If Step 3 fails because the role already exists** (e.g. a previous run partially succeeded): the existing role's ARN is what you want — fetch it with the same \`aws iam get-role\` command and proceed to Step 4.`,
+                ].join("\n"),
+            },
+        ],
+    };
+}
+function errorText(message) {
+    return {
+        isError: true,
+        content: [{ type: "text", text: message }],
+    };
+}
+function renderTrustPolicy(args) {
+    return {
+        Version: "2012-10-17",
+        Statement: [
+            {
+                Effect: "Allow",
+                Principal: { AWS: args.principalArn },
+                Action: "sts:AssumeRole",
+                Condition: {
+                    StringEquals: { "sts:ExternalId": args.externalId },
+                },
+            },
+        ],
+    };
+}
+function renderPermissionPolicy(args) {
+    const statements = [
+        {
+            Effect: "Allow",
+            Action: ["s3:GetObject", "s3:HeadObject"],
+            Resource: `arn:aws:s3:::${args.bucket}/*`,
+        },
+    ];
+    if (args.kmsKeyArn) {
+        statements.push({
+            Effect: "Allow",
+            Action: "kms:Decrypt",
+            Resource: args.kmsKeyArn,
+        });
+    }
+    return { Version: "2012-10-17", Statement: statements };
+}
+//# sourceMappingURL=setup_byo_storage.js.map

package/dist/tools/setup_byo_storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup_byo_storage.js","sourceRoot":"","sources":["../../src/tools/setup_byo_storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,IAAI,EAAE;SACN,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,CACP,0EAA0E,CAC3E;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,wDAAwD;QACxD,6DAA6D,CAChE;IACH,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CACP,8EAA8E;QAC5E,yDAAyD,CAC5D;CACJ,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsB,EACtB,KAA2B;IAE3B,IAAI,CAAC;QACH,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,SAAS,CACd,oEAAoE;gBAClE,qEAAqE;gBACrE,gEAAgE;gBAChE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE;gBAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,oEAAoE;gBACpE,8DAA8D;gBAC9D,sEAAsE;gBACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBACvC,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,OAAO,SAAS,CACd,qDAAqD,QAAQ,CAAC,MAAM,KAAK;wBACvE,4CAA4C;wBAC5C,iGAAiG;wBACjG,4IAA4I,CAC/I,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC9D,OAAO,SAAS,CACd,yDAAyD;oBACvD,mDAAmD,CACtD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,WAAW;QACX,MAAM,cAAc,GAAG,2CAA2C,CAAC,IAAI,CACrE,SAAS,CAAC,sBAAsB,CACjC,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,kDAAkD,SAAS,CAAC,sBAAsB,IAAI;gBACpF,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC;YACpC,YAAY,EAAE,SAAS,CAAC,sBAAsB;YAC9C,UAAU,EAAE,KAAK,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;YAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,MAAM,QAAQ,GACZ,KAAK,CAAC,kBAAkB;YACxB,qBAAqB,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEvD,OAAO,WAAW,CAAC;YACjB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC,qBAAqB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAUD,SAAS,WAAW,CAAC,IAAiB;IACpC,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAChE,MAAM,SAAS,GAAG,uBAAuB,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAC9E,MAAM,QAAQ,GAAG,sBAAsB,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAE5E,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,wKAAwK;oBACxK,EAAE;oBACF,sDAAsD;oBACtD,kBAAkB,KAAK,CAAC,YAAY,IAAI;oBACxC,oBAAoB,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,GAAG;oBACtD,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,mBAAmB;oBAC7E,oBAAoB,KAAK,CAAC,WAAW,wCAAwC;oBAC7E,4BAA4B,QAAQ,IAAI;oBACxC,EAAE;oBACF,kDAAkD;oBAClD,SAAS;oBACT,6BAA6B;oBAC7B,KAAK;oBACL,EAAE;oBACF,kDAAkD;oBAClD,SAAS;oBACT,SAAS,SAAS,WAAW;oBAC7B,WAAW;oBACX,MAAM;oBACN,EAAE;oBACF,SAAS,QAAQ,WAAW;oBAC5B,gBAAgB;oBAChB,MAAM;oBACN,KAAK;oBACL,EAAE;oBACF,4DAA4D;oBAC5D,SAAS;oBACT,wBAAwB;oBACxB,iBAAiB,QAAQ,KAAK;oBAC9B,0CAA0C,SAAS,KAAK;oBACxD,wDAAwD,KAAK,CAAC,MAAM,MAAM;oBAC1E,4CAA4C,KAAK,CAAC,YAAY,KAAK;oBACnE,2CAA2C,KAAK,CAAC,WAAW,KAAK;oBACjE,sCAAsC,KAAK,CAAC,MAAM,EAAE;oBACpD,EAAE;oBACF,4BAA4B;oBAC5B,iBAAiB,QAAQ,KAAK;oBAC9B,uCAAuC;oBACvC,8BAA8B,QAAQ,EAAE;oBACxC,EAAE;oBACF,sCAAsC;oBACtC,gCAAgC,QAAQ,mCAAmC;oBAC3E,KAAK;oBACL,EAAE;oBACF,sCAAsC;oBACtC,EAAE;oBACF,yCAAyC;oBACzC,EAAE;oBACF,KAAK;oBACL,0CAA0C,KAAK,CAAC,YAAY,iCAAiC;oBAC7F,KAAK;oBACL,EAAE;oBACF,4NAA4N;oBAC5N,EAAE;oBACF,sNAAsN;iBACvN,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC;AAOD,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACrC,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE;oBACT,YAAY,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE;iBACpD;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,sBAAsB,CAAC,IAA0B;IACxD,MAAM,UAAU,GAA8B;QAC5C;YACE,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACzC,QAAQ,EAAE,gBAAgB,IAAI,CAAC,MAAM,IAAI;SAC1C;KACF,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC"}

package/dist/types.d.ts

@@ -187,6 +187,22 @@ export interface AuditReport {
     generated_at?: string;
 }
 export type HFImportStatus = "queued" | "downloading" | "uploading_to_hub" | "done" | "failed";
+/**
+ * One entry in a multi-part HF import. F-T6.2 (commit 3636c20) added
+ * multi-part `.bin` auto-discovery: a Volko76-style repo with 3 parts
+ * (prompt / token / kv_cache) now unpacks into 3 ArtifactRefs, in addition
+ * to the legacy single `artifact_id` field (which still points at part 1
+ * for backward compat with older MCP clients).
+ */
+export interface ArtifactRef {
+    id: UUID;
+    filename: string;
+    size_bytes: number;
+    /** "prompt" | "token" | "kv_cache" for M=3 multi-part imports; "part_N" otherwise. */
+    role: string;
+    /** 1-based. */
+    part_index: number;
+}
 export interface HFImportJob {
     import_job_id: string;
     status: HFImportStatus;
@@ -196,6 +212,36 @@ export interface HFImportJob {
     size_bytes: number | null;
     filename: string | null;
     error_detail: string | null;
+    /**
+     * Plan B / F-T6.2 — when the HF repo contains multiple .bin parts, this
+     * array surfaces every part (size > 1 for multi-part imports). Omitted
+     * or single-element for legacy single-file imports.
+     */
+    artifacts?: ArtifactRef[];
+}
+export type LLMCompileStatus = "queued" | "running" | "completed" | "failed";
+export interface LLMCompileProgress {
+    compile_jobs_done: number;
+    compile_jobs_total: number;
+}
+/**
+ * Returned by POST /v1/workspaces/{ws}/llm-compile and GET
+ * /v1/workspaces/{ws}/llm-compile/{compile_job_id}. POST returns the
+ * initial queued state; GET reflects current state. On success,
+ * `composite_artifact_id` is the QNN_DLC linked composite ready to be
+ * referenced from a pipeline. On failure, `error_detail` is set.
+ */
+export interface LLMCompileJob {
+    compile_job_id: UUID;
+    status: LLMCompileStatus;
+    composite_artifact_id: UUID | null;
+    error_detail: string | null;
+    progress: LLMCompileProgress;
+    /** Echoed for caller convenience. */
+    device_id?: string;
+    target_runtime?: string;
+    created_at?: string;
+    updated_at?: string;
 }
 export interface MetricDelta {
     current: number | null;
@@ -298,17 +344,35 @@ export interface PromptPackCreateBody {
 export interface ByoGrant {
     id: UUID;
     workspace_id: UUID;
-    role_arn: string;
+    role_arn: string | null;
     external_id: UUID;
     bucket: string;
     region: string;
     kms_key_id: string | null;
-    status: "active" | "revoked" | "failed";
+    status: "pending_role" | "active" | "revoked" | "failed";
     last_verified_at: string | null;
     last_verify_error: string | null;
     created_at: string;
     updated_at: string;
 }
+/**
+ * GET /v1/workspaces/{ws}/byo-storage/setup-info response. Surfaces
+ * EdgeGate's IAM principal so the orchestrator tool can render the trust
+ * policy with the right ARN before asking the agent to create the role.
+ */
+export interface ByoSetupInfo {
+    edgegate_aws_account_id: string;
+    edgegate_principal_arn: string;
+    docs_url: string;
+    trust_policy_template: string;
+    permission_policy_template: string;
+    permission_policy_with_kms_template: string;
+    cloudformation_template_url: string;
+    cloudformation_template_yaml: string;
+    terraform_template: string;
+    terraform_template_with_kms: string;
+    setup_info_warning: string | null;
+}
 /**
  * Request body for POST /v1/workspaces/{ws}/artifacts/byo.
  * Registers an existing S3 URI in the customer's grant-registered bucket

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.9.1";
-export declare const USER_AGENT = "edgegate-mcp/0.9.1";
+export declare const VERSION = "0.11.0";
+export declare const USER_AGENT = "edgegate-mcp/0.11.0";

package/dist/version.js

@@ -1,3 +1,3 @@
-export const VERSION = "0.9.1";
+export const VERSION = "0.11.0";
 export const USER_AGENT = `edgegate-mcp/${VERSION}`;
 //# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,OAAO,EAAE,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAChC,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,OAAO,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "edgegate-mcp",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "MCP server for EdgeGate — set up edge-AI regression gates from Claude Code, Cursor, or Claude Desktop.",
   "license": "MIT",
   "type": "module",