raytio-mcp-server 1.16.1

package/dist/tools/wrm/wrm-agent-run-step-list.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, API_ERROR } from '../types.js';
+import { WRM_AGENT_RUN_STEP_SELECT } from '../../wrm/projection.js';
+export const agentRunStepListTool = {
+    name: 'wrm_agent_run_step_list',
+    description: 'List agent run steps by agent_run_id, ordered by step_order',
+    inputSchema: z.object({
+        agent_run_id: z.string().describe('UUID of the parent agent run'),
+    }),
+    handler: async (args, ctx) => {
+        const { agent_run_id } = args;
+        try {
+            const items = await ctx.apiClient.get(`/db/v1/wrm_agent_run_steps?agent_run_id=eq.${agent_run_id}&order=step_order.asc&select=${WRM_AGENT_RUN_STEP_SELECT}`);
+            return successResponse({ items, count: items.length });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to list agent run steps: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-agent-run-step-list.js.map

package/dist/tools/wrm/wrm-agent-run-step-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-step-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,6DAA6D;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAClE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,IAAgC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,8CAA8C,YAAY,gCAAgC,yBAAyB,EAAE,CACtH,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,mCAAmC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-update.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const agentRunStepUpdateTool: Tool;
+//# sourceMappingURL=wrm-agent-run-step-update.d.ts.map

package/dist/tools/wrm/wrm-agent-run-step-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-step-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,sBAAsB,EAAE,IA0CpC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-update.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { WRM_AGENT_RUN_STEP_SELECT } from '../../wrm/projection.js';
+export const agentRunStepUpdateTool = {
+    name: 'wrm_agent_run_step_update',
+    description: 'Update an agent run step (status, end time, output). Sets step_ended_at to NOW() automatically when step_status is SUCCESS or FAILED unless explicitly provided.',
+    inputSchema: z.object({
+        id: z.string().describe('UUID of the agent run step'),
+        step_status: z.string().optional().describe('New status (RUNNING, SUCCESS, FAILED, SKIPPED)'),
+        step_ended_at: z.string().optional().describe('ISO timestamp; auto-set to NOW() if status is SUCCESS or FAILED'),
+        output_summary: z.string().nullable().optional().describe('Truncated output/result (null to clear)'),
+        metadata: z.record(z.unknown()).nullable().optional().describe('Step-specific data (null to clear)'),
+    }),
+    handler: async (args, ctx) => {
+        const { id, ...updates } = args;
+        try {
+            const body = {};
+            for (const [key, value] of Object.entries(updates)) {
+                if (value !== undefined)
+                    body[key] = value;
+            }
+            // Auto-set step_ended_at when terminal status and not explicitly provided
+            if (body.step_status &&
+                (body.step_status === 'SUCCESS' || body.step_status === 'FAILED') &&
+                body.step_ended_at === undefined) {
+                body.step_ended_at = new Date().toISOString();
+            }
+            const items = await ctx.apiClient.patch(`/db/v1/wrm_agent_run_steps?id=eq.${id}&select=${WRM_AGENT_RUN_STEP_SELECT}`, body, { headers: { Prefer: 'return=representation' } });
+            if (!items || items.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Agent run step ${id} not found`);
+            }
+            return successResponse(items[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to update agent run step: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-agent-run-step-update.js.map

package/dist/tools/wrm/wrm-agent-run-step-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-step-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,kKAAkK;IAC/K,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC7F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QAChH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACpG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACrG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,0EAA0E;YAC1E,IACE,IAAI,CAAC,WAAW;gBAChB,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;gBACjE,IAAI,CAAC,aAAa,KAAK,SAAS,EAChC,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,oCAAoC,EAAE,WAAW,yBAAyB,EAAE,EAC5E,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-summary.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const agentRunSummaryTool: Tool;
+//# sourceMappingURL=wrm-agent-run-summary.d.ts.map

package/dist/tools/wrm/wrm-agent-run-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-summary.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAetC,eAAO,MAAM,mBAAmB,EAAE,IAyCjC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-summary.js

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { WRM_AGENT_RUN_SELECT, WRM_AGENT_RUN_STEP_SELECT, WRM_AGENT_RUN_ARTIFACT_SELECT, WRM_AGENT_RUN_EVAL_SELECT, } from '../../wrm/projection.js';
+export const agentRunSummaryTool = {
+    name: 'wrm_agent_run_summary',
+    description: 'Return a complete agent run summary in one call — run record, all steps, ' +
+        'all artifacts, and all evals. Replaces 4 separate CRUD calls.',
+    inputSchema: z.object({
+        id: z.string().describe('UUID of the agent run'),
+    }),
+    handler: async (args, ctx) => {
+        const { id } = args;
+        try {
+            const [runs, steps, artifacts, evals] = await Promise.all([
+                ctx.apiClient.get(`/db/v1/wrm_agent_runs?id=eq.${id}&select=${WRM_AGENT_RUN_SELECT}`),
+                ctx.apiClient.get(`/db/v1/wrm_agent_run_steps?agent_run_id=eq.${id}&select=${WRM_AGENT_RUN_STEP_SELECT}&order=step_order.asc&limit=200`),
+                ctx.apiClient.get(`/db/v1/wrm_agent_run_artifacts?agent_run_id=eq.${id}&select=${WRM_AGENT_RUN_ARTIFACT_SELECT}&limit=200`),
+                ctx.apiClient.get(`/db/v1/wrm_agent_run_evals?agent_run_id=eq.${id}&select=${WRM_AGENT_RUN_EVAL_SELECT}&order=evaluated_at.asc&limit=200`),
+            ]);
+            if (!runs || runs.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Agent run ${id} not found`);
+            }
+            return successResponse({
+                run: runs[0],
+                steps,
+                artifacts,
+                evals,
+            });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to get agent run summary: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-agent-run-summary.js.map

package/dist/tools/wrm/wrm-agent-run-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-summary.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAQjC,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,2EAA2E;QAC3E,+DAA+D;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,CACnE;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,iCAAiC,CACtH;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,kDAAkD,EAAE,WAAW,6BAA6B,YAAY,CACzG;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,mCAAmC,CACxH;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACZ,KAAK;gBACL,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-update.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const agentRunUpdateTool: Tool;
+//# sourceMappingURL=wrm-agent-run-update.d.ts.map

package/dist/tools/wrm/wrm-agent-run-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,kBAAkB,EAAE,IA4ChC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-update.js

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { WRM_AGENT_RUN_SELECT } from '../../wrm/projection.js';
+export const agentRunUpdateTool = {
+    name: 'wrm_agent_run_update',
+    description: 'Update an agent run record (status, cost, tokens, end time, etc.). ' +
+        'Pass null for a nullable field to clear it; omit the field to leave it unchanged.',
+    inputSchema: z.object({
+        id: z.string().describe('UUID of the agent run'),
+        run_status: z.string().optional().describe('New status (RUNNING, SUCCESS, FAILED, TIMEOUT, BUDGET_EXCEEDED, INVALID_OUTPUT)'),
+        total_tokens_in: z.number().nullable().optional().describe('Input token count'),
+        total_tokens_out: z.number().nullable().optional().describe('Output token count'),
+        total_cost_usd: z.number().nullable().optional().describe('Total cost in USD'),
+        duration_ms: z.number().nullable().optional().describe('Execution duration in milliseconds'),
+        exit_code: z.number().nullable().optional().describe('Process exit code'),
+        error_message: z.string().nullable().optional().describe('Error details on failure'),
+        mr_url: z.string().nullable().optional().describe('Merge request URL'),
+        model_id: z.string().nullable().optional().describe('UUID of the model (wrm_models.id)'),
+        provider_id: z.string().nullable().optional().describe('UUID of the provider (wrm_providers.id)'),
+        run_ended_at: z.string().nullable().optional().describe('Run end timestamp'),
+        metadata: z.record(z.unknown()).nullable().optional().describe('Backend-specific metadata (JSONB)'),
+    }),
+    handler: async (args, ctx) => {
+        const { id, ...updates } = args;
+        try {
+            const body = {};
+            for (const [key, value] of Object.entries(updates)) {
+                if (value !== undefined)
+                    body[key] = value;
+            }
+            const items = await ctx.apiClient.patch(`/db/v1/wrm_agent_runs?id=eq.${id}&select=${WRM_AGENT_RUN_SELECT}`, body, { headers: { Prefer: 'return=representation' } });
+            if (!items || items.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Agent run ${id} not found`);
+            }
+            return successResponse(items[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to update agent run: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-agent-run-update.js.map

package/dist/tools/wrm/wrm-agent-run-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-agent-run-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,qEAAqE;QACrE,mFAAmF;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;QAC7H,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC/E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACjF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACjG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;KACpG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,EAClE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-list.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const credentialListTool: Tool;
+//# sourceMappingURL=wrm-credential-list.d.ts.map

package/dist/tools/wrm/wrm-credential-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,kBAAkB,EAAE,IA2ChC,CAAC"}

package/dist/tools/wrm/wrm-credential-list.js

@@ -0,0 +1,41 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, API_ERROR } from '../types.js';
+export const credentialListTool = {
+    name: 'wrm_credential_list',
+    description: 'List credentials for a worker. Optionally filter by status ' +
+        '(PENDING | ACTIVE | EXPIRED | REVOKED). ' +
+        'Returns { credential_id, credential_name, credential_type, status, expires_at }[].',
+    inputSchema: z.object({
+        worker_id: z.string().describe('UUID of the worker'),
+        status: z
+            .enum(['PENDING', 'ACTIVE', 'EXPIRED', 'REVOKED'])
+            .optional()
+            .describe('Filter by credential status (omit to return all)'),
+    }),
+    handler: async (args, ctx) => {
+        const input = args;
+        try {
+            const parts = [
+                `worker_id=eq.${input.worker_id}`,
+                'active=eq.true',
+                'order=credential_name.asc',
+                'limit=100',
+            ];
+            if (input.status !== undefined) {
+                parts.push(`status=eq.${input.status}`);
+            }
+            const items = await ctx.apiClient.get(`/db/v1/wrm_worker_credentials?select=id,credential_name,credential_type,status,expires_at&${parts.join('&')}`);
+            return successResponse(items.map((c) => ({
+                credential_id: c.id,
+                credential_name: c.credential_name,
+                credential_type: c.credential_type,
+                status: c.status,
+                expires_at: c.expires_at,
+            })));
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to list credentials: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-credential-list.js.map

package/dist/tools/wrm/wrm-credential-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxE,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,6DAA6D;QAC7D,0CAA0C;QAC1C,oFAAoF;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;aACjD,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;KAChE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa;gBACtB,gBAAgB,KAAK,CAAC,SAAS,EAAE;gBACjC,gBAAgB;gBAChB,2BAA2B;gBAC3B,WAAW;aACZ,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,6FAA6F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;YAEF,OAAO,eAAe,CACpB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChB,aAAa,EAAE,CAAC,CAAC,EAAE;gBACnB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-request-create.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const credentialRequestCreateTool: Tool;
+//# sourceMappingURL=wrm-credential-request-create.d.ts.map

package/dist/tools/wrm/wrm-credential-request-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-request-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,2BAA2B,EAAE,IAoHzC,CAAC"}

package/dist/tools/wrm/wrm-credential-request-create.js

@@ -0,0 +1,93 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, WRM_VALIDATION, API_ERROR } from '../types.js';
+import { WRM_WORKER_SELECT } from '../../wrm/projection.js';
+export const credentialRequestCreateTool = {
+    name: 'wrm_credential_request_create',
+    description: 'Creates a credential request for an agent worker. Builds an Access Application (AA), ' +
+        'adds the worker to the AA guest list, creates credential and request records, ' +
+        'and notifies the specified human user to share the credential via the AA flow. ' +
+        'Returns { request_id, aa_id, credential_id }.',
+    inputSchema: z.object({
+        worker_id: z.string().describe('UUID of the requesting worker'),
+        credential_name: z.string().describe('Name identifying this credential (e.g. "github_api_token")'),
+        credential_type: z
+            .enum(['API_KEY', 'OAUTH_TOKEN', 'PASSWORD', 'CERTIFICATE', 'CUSTOM'])
+            .describe('Type of credential being requested'),
+        purpose: z.string().describe('Why the agent needs this credential (shown to the human)'),
+        request_from_user_id: z.string().describe('UUID of the human user to notify and request from'),
+        ttl_seconds: z.number().optional().describe('Credential TTL in seconds (default 3600)'),
+        work_item_id: z.string().optional().describe('UUID of the related PPM work item (optional)'),
+    }),
+    handler: async (args, ctx) => {
+        const input = args;
+        try {
+            // Step 1: Validate worker exists and has a service account user_id
+            const workers = await ctx.apiClient.get(`/db/v1/wrm_workers?id=eq.${input.worker_id}&select=${WRM_WORKER_SELECT}`);
+            if (!workers || workers.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Worker ${input.worker_id} not found`);
+            }
+            const worker = workers[0];
+            if (!worker.user_id) {
+                return errorResponse(WRM_VALIDATION, `Worker ${input.worker_id} has no service account user_id. ` +
+                    'Credential sharing requires a Cognito service account linked to the worker.');
+            }
+            const ttl = input.ttl_seconds ?? 3600;
+            const expiresAt = new Date(Date.now() + ttl * 1000).toISOString();
+            // Step 2: Create Access Application for the credential sharing context
+            const aaRecords = await ctx.apiClient.post('/db/v1/dsm_access_applications?select=id', {
+                name: `Credential Request: ${input.credential_name}`,
+                description: input.purpose,
+            }, { headers: { Prefer: 'return=representation' } });
+            const aaId = aaRecords[0].id;
+            // Step 3: Add worker's user_id to AA guest list
+            await ctx.apiClient.post('/db/v1/dsm_access_application_users', { aa_id: aaId, user_id: worker.user_id }, { headers: { Prefer: 'return=representation' } });
+            // Step 4: Create credential record (status=PENDING, encrypted_value empty until fulfilled)
+            const credBody = {
+                worker_id: input.worker_id,
+                credential_name: input.credential_name,
+                credential_type: input.credential_type,
+                encrypted_value: {},
+                source_aa_id: aaId,
+                expires_at: expiresAt,
+                status: 'PENDING',
+                request_context: {
+                    purpose: input.purpose,
+                    work_item_id: input.work_item_id ?? null,
+                },
+            };
+            const credRecords = await ctx.apiClient.post('/db/v1/wrm_worker_credentials?select=id', credBody, { headers: { Prefer: 'return=representation' } });
+            const credentialId = credRecords[0].id;
+            // Step 5: Create credential request record (tracks lifecycle)
+            const reqBody = {
+                worker_id: input.worker_id,
+                requested_from_user_id: input.request_from_user_id,
+                aa_id: aaId,
+                credential_id: credentialId,
+                credential_name: input.credential_name,
+                credential_type: input.credential_type,
+                purpose: input.purpose,
+                ttl_seconds: ttl,
+                status: 'PENDING',
+            };
+            if (input.work_item_id)
+                reqBody.work_item_id = input.work_item_id;
+            const reqRecords = await ctx.apiClient.post('/db/v1/wrm_credential_requests?select=id', reqBody, { headers: { Prefer: 'return=representation' } });
+            const requestId = reqRecords[0].id;
+            // Step 6: Fire-and-forget notification to the human (non-fatal if it fails)
+            ctx.apiClient
+                .post('/db/v1/fnd_notifications', {
+                user_id: input.request_from_user_id,
+                notification_type: 'CREDENTIAL_REQUEST',
+                title: `Credential request: ${input.credential_name}`,
+                message: `An AI agent is requesting the credential "${input.credential_name}". Purpose: ${input.purpose}`,
+                metadata: { request_id: requestId, aa_id: aaId, credential_id: credentialId },
+            })
+                .catch(() => undefined);
+            return successResponse({ request_id: requestId, aa_id: aaId, credential_id: credentialId });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to create credential request: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-credential-request-create.js.map

package/dist/tools/wrm/wrm-credential-request-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-request-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,uFAAuF;QACvF,gFAAgF;QAChF,iFAAiF;QACjF,+CAA+C;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAClG,eAAe,EAAE,CAAC;aACf,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;aACrE,QAAQ,CAAC,oCAAoC,CAAC;QACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QACxF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACvF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KAC7F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACrC,4BAA4B,KAAK,CAAC,SAAS,WAAW,iBAAiB,EAAE,CAC1E,CAAC;YACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,aAAa,CAAC,aAAa,EAAE,UAAU,KAAK,CAAC,SAAS,YAAY,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,aAAa,CAClB,cAAc,EACd,UAAU,KAAK,CAAC,SAAS,mCAAmC;oBAC1D,6EAA6E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAElE,uEAAuE;YACvE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACxC,0CAA0C,EAC1C;gBACE,IAAI,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACpD,WAAW,EAAE,KAAK,CAAC,OAAO;aAC3B,EACD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEvC,gDAAgD;YAChD,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACtB,qCAAqC,EACrC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EACxC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,2FAA2F;YAC3F,MAAM,QAAQ,GAAwB;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,EAAE;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE;oBACf,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;iBACzC;aACF,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAC1C,yCAAyC,EACzC,QAAQ,EACR,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEjD,8DAA8D;YAC9D,MAAM,OAAO,GAAwB;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;gBAClD,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,YAAY;gBAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,SAAS;aAClB,CAAC;YACF,IAAI,KAAK,CAAC,YAAY;gBAAE,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAElE,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACzC,0CAA0C,EAC1C,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAE7C,4EAA4E;YAC5E,GAAG,CAAC,SAAS;iBACV,IAAI,CAAC,0BAA0B,EAAE;gBAChC,OAAO,EAAE,KAAK,CAAC,oBAAoB;gBACnC,iBAAiB,EAAE,oBAAoB;gBACvC,KAAK,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACrD,OAAO,EAAE,6CAA6C,KAAK,CAAC,eAAe,eAAe,KAAK,CAAC,OAAO,EAAE;gBACzG,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;aAC9E,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAE1B,OAAO,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-request-status.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const credentialRequestStatusTool: Tool;
+//# sourceMappingURL=wrm-credential-request-status.d.ts.map

package/dist/tools/wrm/wrm-credential-request-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-request-status.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,2BAA2B,EAAE,IAuCzC,CAAC"}

package/dist/tools/wrm/wrm-credential-request-status.js

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+export const credentialRequestStatusTool = {
+    name: 'wrm_credential_request_status',
+    description: 'Check the status of a credential request. ' +
+        'Returns status (PENDING | SHARED | EXPIRED | DENIED | CANCELLED), ' +
+        'credential_id (when SHARED), and expires_at (when SHARED).',
+    inputSchema: z.object({
+        request_id: z.string().describe('UUID of the credential request'),
+    }),
+    handler: async (args, ctx) => {
+        const { request_id } = args;
+        try {
+            const items = await ctx.apiClient.get(`/db/v1/wrm_credential_requests?id=eq.${request_id}&select=id,status,credential_id,active`);
+            if (!items || items.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Credential request ${request_id} not found`);
+            }
+            const req = items[0];
+            let expiresAt = null;
+            if (req.status === 'SHARED' && req.credential_id) {
+                const creds = await ctx.apiClient.get(`/db/v1/wrm_worker_credentials?id=eq.${req.credential_id}&select=expires_at`);
+                if (creds && creds.length > 0) {
+                    expiresAt = creds[0].expires_at;
+                }
+            }
+            return successResponse({
+                status: req.status,
+                credential_id: req.credential_id ?? null,
+                expires_at: expiresAt,
+            });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to get credential request status: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-credential-request-status.js.map

package/dist/tools/wrm/wrm-credential-request-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-request-status.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,4CAA4C;QAC5C,oEAAoE;QACpE,4DAA4D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;KAClE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,IAA8B,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,wCAAwC,UAAU,wCAAwC,CAC3F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,sBAAsB,UAAU,YAAY,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAErB,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,GAAG,CAAC,aAAa,oBAAoB,CAC7E,CAAC;gBACF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;gBACxC,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-retrieve.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const credentialRetrieveTool: Tool;
+//# sourceMappingURL=wrm-credential-retrieve.d.ts.map

package/dist/tools/wrm/wrm-credential-retrieve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-retrieve.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,sBAAsB,EAAE,IAsCpC,CAAC"}

package/dist/tools/wrm/wrm-credential-retrieve.js

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { WRM_WORKER_CREDENTIAL_SELECT } from '../../wrm/projection.js';
+export const credentialRetrieveTool = {
+    name: 'wrm_credential_retrieve',
+    description: 'Retrieve an encrypted credential for a worker. ' +
+        'Returns the Maxcryptor-encrypted payload — never plaintext. ' +
+        'The caller must decrypt using the worker\'s key material via the Maxcryptor library.',
+    inputSchema: z.object({
+        worker_id: z.string().describe('UUID of the worker'),
+        credential_name: z.string().describe('Name of the credential to retrieve (e.g. "github_api_token")'),
+    }),
+    handler: async (args, ctx) => {
+        const { worker_id, credential_name } = args;
+        try {
+            const items = await ctx.apiClient.get(`/db/v1/wrm_worker_credentials` +
+                `?worker_id=eq.${worker_id}` +
+                `&credential_name=eq.${credential_name}` +
+                `&active=eq.true` +
+                `&select=${WRM_WORKER_CREDENTIAL_SELECT}` +
+                `&order=created_date.desc&limit=1`);
+            if (!items || items.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Credential "${credential_name}" not found for worker ${worker_id}`);
+            }
+            const cred = items[0];
+            return successResponse({
+                encrypted_value: cred.encrypted_value,
+                expires_at: cred.expires_at,
+                credential_type: cred.credential_type,
+                status: cred.status,
+            });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to retrieve credential: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-credential-retrieve.js.map

package/dist/tools/wrm/wrm-credential-retrieve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-retrieve.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,iDAAiD;QACjD,8DAA8D;QAC9D,sFAAsF;IACxF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;KACrG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAsD,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,+BAA+B;gBAC7B,iBAAiB,SAAS,EAAE;gBAC5B,uBAAuB,eAAe,EAAE;gBACxC,iBAAiB;gBACjB,WAAW,4BAA4B,EAAE;gBACzC,kCAAkC,CACrC,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,aAAa,EACb,eAAe,eAAe,0BAA0B,SAAS,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,eAAe,CAAC;gBACrB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-revoke.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const credentialRevokeTool: Tool;
+//# sourceMappingURL=wrm-credential-revoke.d.ts.map

package/dist/tools/wrm/wrm-credential-revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-revoke.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,oBAAoB,EAAE,IAgDlC,CAAC"}

package/dist/tools/wrm/wrm-credential-revoke.js

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+export const credentialRevokeTool = {
+    name: 'wrm_credential_revoke',
+    description: 'Revoke a credential — marks it as REVOKED, deactivates the source Access Application, ' +
+        'and cancels any open credential requests associated with it.',
+    inputSchema: z.object({
+        credential_id: z.string().describe('UUID of the credential to revoke'),
+    }),
+    handler: async (args, ctx) => {
+        const { credential_id } = args;
+        try {
+            // Step 1: Fetch credential to get source_aa_id
+            const creds = await ctx.apiClient.get(`/db/v1/wrm_worker_credentials?id=eq.${credential_id}&select=id,source_aa_id,status,active`);
+            if (!creds || creds.length === 0) {
+                return errorResponse(WRM_NOT_FOUND, `Credential ${credential_id} not found`);
+            }
+            const cred = creds[0];
+            // Step 2: Mark credential as REVOKED
+            await ctx.apiClient.patch(`/db/v1/wrm_worker_credentials?id=eq.${credential_id}`, { status: 'REVOKED', active: false }, { headers: { Prefer: 'return=minimal' } });
+            // Step 3: Deactivate the source AA so the human can no longer share via it
+            if (cred.source_aa_id) {
+                await ctx.apiClient.patch(`/db/v1/dsm_access_applications?id=eq.${cred.source_aa_id}`, { active: false }, { headers: { Prefer: 'return=minimal' } });
+            }
+            // Step 4: Cancel any open requests tied to this credential
+            await ctx.apiClient.patch(`/db/v1/wrm_credential_requests?credential_id=eq.${credential_id}&status=in.(PENDING,SHARED)`, { status: 'CANCELLED' }, { headers: { Prefer: 'return=minimal' } });
+            return successResponse({ credential_id, status: 'REVOKED' });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to revoke credential: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-credential-revoke.js.map

package/dist/tools/wrm/wrm-credential-revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-credential-revoke.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,wFAAwF;QACxF,8DAA8D;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KACvE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAiC,CAAC;QAC5D,IAAI,CAAC;YACH,+CAA+C;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,aAAa,uCAAuC,CAC5F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,aAAa,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,qCAAqC;YACrC,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,uCAAuC,aAAa,EAAE,EACtD,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EACpC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,2EAA2E;YAC3E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,wCAAwC,IAAI,CAAC,YAAY,EAAE,EAC3D,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,mDAAmD,aAAa,6BAA6B,EAC7F,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-effective-mcp-servers.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const effectiveMcpServersTool: Tool;
+//# sourceMappingURL=wrm-effective-mcp-servers.d.ts.map

package/dist/tools/wrm/wrm-effective-mcp-servers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-effective-mcp-servers.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-servers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,uBAAuB,EAAE,IA2CrC,CAAC"}

package/dist/tools/wrm/wrm-effective-mcp-servers.js

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+import { successResponse, errorResponse, API_ERROR } from '../types.js';
+import { WRM_EFFECTIVE_MCP_SERVER_SELECT } from '../../wrm/projection.js';
+export const effectiveMcpServersTool = {
+    name: 'wrm_effective_mcp_servers',
+    description: 'Return the resolved MCP server set for a worker, merging definition defaults with instance overrides. Includes source attribution.',
+    inputSchema: z.object({
+        worker_id: z.string().describe('UUID of the worker'),
+        limit: z.number().optional().describe('Max results (default 50, max 200)'),
+        offset: z.number().optional().describe('Offset for pagination'),
+    }),
+    handler: async (args, ctx) => {
+        const input = args;
+        try {
+            const parts = [];
+            parts.push(`worker_id=eq.${input.worker_id}`);
+            const limit = Math.min(input.limit ?? 50, 200);
+            parts.push(`limit=${limit}`);
+            if (input.offset) {
+                parts.push(`offset=${input.offset}`);
+            }
+            parts.push('order=mcp_server_id.asc');
+            const query = parts.join('&');
+            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_worker_mcp_servers?select=${WRM_EFFECTIVE_MCP_SERVER_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
+            const offset = input.offset ?? 0;
+            return successResponse({
+                items,
+                count: items.length,
+                next_offset: items.length === limit ? offset + limit : null,
+            });
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to list effective MCP servers: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=wrm-effective-mcp-servers.js.map

package/dist/tools/wrm/wrm-effective-mcp-servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-effective-mcp-servers.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-servers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAG1E,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,oIAAoI;IACtI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,kDAAkD,+BAA+B,IAAI,KAAK,EAAE,EAC5F,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-effective-mcp-tools.d.ts

@@ -0,0 +1,3 @@
+import { Tool } from '../registry.js';
+export declare const effectiveMcpToolsTool: Tool;
+//# sourceMappingURL=wrm-effective-mcp-tools.d.ts.map

package/dist/tools/wrm/wrm-effective-mcp-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrm-effective-mcp-tools.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,qBAAqB,EAAE,IA2CnC,CAAC"}