@cliwant/mcp-sam-gov 0.3.0 → 1.1.0

package/dist/integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../src/integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,oEAAoE;AAEpE,yEAAyE;AACzE,2EAA2E;AAC3E,4CAA4C;AAC5C,MAAM,MAAM,GACV,yFAAyF,CAAC;AAC5F,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,sBAAsB;IAC9B,YAAY,EAAE,MAAM;CACZ,CAAC;AAEX,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAC1D,MAAM,IAAI,GAAG,oCAAoC,CAAC;AAElD,sEAAsE;AACtE,mCAAmC;AACnC,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,KAAK,UAAU,UAAU,CAAI,GAAW,EAAE,KAAa;IACrD,MAAM,CAAC,GAAG,MAAM,cAAc,CAC5B,GAAG,EACH,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjE,KAAK,CACN,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAM,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,QAAgB,EAChB,IAA6B;IAE7B,MAAM,CAAC,GAAG,MAAM,cAAc,CAC5B,GAAG,IAAI,IAAI,QAAQ,EAAE,EACrB;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,EACD,eAAe,QAAQ,EAAE,CAC1B,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAM,CAAC;AAC/B,CAAC;AAED,oEAAoE;AAEpE,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AAErE;;;;GAIG;AACH,MAAM,cAAc,GAClB,+IAA+I,CAAC;AAwClJ,uEAAuE;AACvE,SAAS,IAAI,CAAC,CAA4B;IACxC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,CAA4B;IAC5C,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;SACb,WAAW,EAAE;SACb,OAAO,CAAC,6BAA6B,EAAE,GAAG,CAAC;SAC3C,OAAO,CAAC,0FAA0F,EAAE,GAAG,CAAC;SACxG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAQrC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAErE,4EAA4E;IAC5E,uBAAuB;IACvB,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,uIAAuI;YACzI,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,wBAAwB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,KAAK,EAAE,IAAI;QACX,CAAC,EAAE,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAmB,GAAG,EAAE,YAAY,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,IAAI,IAAI,CAAC;IAEvD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,cAAc,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;SACnD,IAAI,GAAG;QAAE,cAAc,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;SACvD,IAAI,IAAI;QAAE,cAAc,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAE9D,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,QAAQ,GAAG,UAAU,CAAC;IAC1B,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;YAChE,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzC,cAAc,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,uEAAuE;QACvE,sEAAsE;QACtE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3D,cAAc,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC;QAC9D,cAAc,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,cAAc,CACzD,CAAC;QACF,cAAc,CAAC,IAAI,CAAC,kBAAkB,cAAc,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;QACvD,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACnB,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,IAAI,IAAI,IAAI;YAC9C,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;YAC9B,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;YAC1C,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI;YAClD,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;YACvD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;YAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;YACxC,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;YAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,qEAAqE;YACrE,YAAY,EAAE,MAAM;gBAClB,CAAC,CAAC,sCAAsC,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBACpE,CAAC,CAAC,sCAAsC,kBAAkB,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;SAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAElC,0EAA0E;IAC1E,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,YAAY,GAChB,OAAO,CAAC,KAAK,CAAC;QACd,OAAO,CAAC,GAAG,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC;QACb,cAAc,KAAK,KAAK,CAAC;IAC3B,MAAM,eAAe,GACnB,aAAa,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,aAAa,CAAC;IAC9D,MAAM,MAAM,GAAG,aAAa,KAAK,IAAI,IAAI,aAAa,GAAG,eAAe,CAAC;IACzE,MAAM,SAAS,GAAG,eAAe,IAAI,MAAM,IAAI,YAAY,CAAC;IAE5D,MAAM,KAAK,GAAa,CAAC,cAAc,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CACR,6NAA6N,CAC9N,CAAC;IACF,IAAI,KAAK,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,mCAAmC,aAAa,wCAAwC,KAAK,+VAA+V,CAC7b,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,mNAAmN,CACpN,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,2BAA2B,eAAe,CAAC,cAAc,EAAE,0EAA0E,CACtI,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,6OAA6O,CAC9O,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CACb;QACE,QAAQ;QACR,UAAU;QACV,OAAO;QACP,IAAI;QACJ,IAAI;KACL,EACD;QACE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,cAAc,EAAE,aAAa;QAC7B,SAAS;QACT,UAAU,EAAE;YACV,MAAM,EAAE,IAAI,GAAG,IAAI;YACnB,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI;YACtD,OAAO,EAAE,eAAe;SACzB;QACD,cAAc;QACd,cAAc;QACd,iBAAiB,EAAE,EAAE;QACrB,KAAK;KACN,CACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AAEpE,MAAM,gBAAgB,GACpB,uGAAuG,CAAC;AAE1G,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,qBAAqB,GACzB,oSAAoS,CAAC;AAEvS;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAIrC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE5C,6EAA6E;IAC7E,iEAAiE;IACjE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,2IAA2I;YAC7I,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,wBAAwB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC;QAC1C,KAAK,EAAE,IAAI;QACX,GAAG;QACH,IAAI;QACJ,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC;IAC9B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC;IAEtC,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,aAAa,GAAiC,QAAQ;QAC1D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,eAAe,CAAC;IAEpB,kEAAkE;IAClE,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,GAAG;QACnB,CAAC,CAAC,qCAAqC,kBAAkB,CAAC,GAAG,CAAC,4BAA4B;QAC1F,CAAC,CAAC,kBAAkB,CAAC;IAEvB,MAAM,IAAI,GAAG;QACX,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,IAAI,IAAI;YAClB,GAAG,EAAE,GAAG,IAAI,IAAI;YAChB,IAAI,EAAE,IAAI,IAAI,IAAI;SACnB;QACD,UAAU,EAAE;YACV,QAAQ;YACR,WAAW,EAAE,EAAE,CAAC,UAAU;YAC1B,OAAO,EAAE,EAAE,CAAC,OAAO;SACpB;QACD,4EAA4E;QAC5E,uDAAuD;QACvD,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,kBAAkB;QACpC,SAAS;QACT,aAAa;KACd,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,yCAAyC;IACzC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,2XAA2X,CAC5X,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,8PAA8P,CAC/P,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CACR,gNAAgN,CACjN,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE;QACpB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,IAAI;QACjB,wDAAwD;QACxD,QAAQ,EAAE,CAAC;QACX,cAAc,EAAE,CAAC;QACjB,uEAAuE;QACvE,4DAA4D;QAC5D,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE,EAAE;QAClB,8EAA8E;QAC9E,iBAAiB,EAAE,CAAC,eAAe,CAAC;QACpC,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AAEpE,MAAM,cAAc,GAClB,0DAA0D,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,gBAAgB;IAChB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,uDAAuD;IACvD,yCAAyC;IACzC,wBAAwB;IACxB,0CAA0C;CAClC,CAAC;AAIX,MAAM,kBAAkB,GACtB,sNAAsN,CAAC;AAEzN,iFAAiF;AACjF,KAAK,UAAU,iBAAiB,CAC9B,OAAgC;IAEhC,IAAI,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAY,iCAAiC,EAAE;YACxE,OAAO;YACP,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC7C,CAAC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAwBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAY3C;IACC,0EAA0E;IAC1E,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,+BAA+B,IAAI,8LAA8L,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACtQ,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,0BAA0B;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,EAAE,EACF,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAA4B;QACvC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QACtC,oBAAoB,EAAE,CAAC,IAAI,CAAC;QAC5B,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,cAAc,GAAa;QAC/B,QAAQ,IAAI,GAAG;QACf,sBAAsB,aAAa,IAAI;KACxC,CAAC;IACF,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,wEAAwE;IACxE,2DAA2D;IAC3D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,QAAQ,GAA8B;YAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;SACzD,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC5B,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,yEAAyE;QACzE,iDAAiD;QACjD,cAAc,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG;QACb,UAAU;QACV,gBAAgB;QAChB,cAAc;QACd,iBAAiB;QACjB,qBAAqB;QACrB,OAAO;QACP,cAAc;QACd,YAAY;QACZ,UAAU;QACV,sBAAsB;KACvB,CAAC;IAuBF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAC;IACjD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CACzB,0BAA0B,EAC1B;YACE,OAAO;YACP,MAAM;YACN,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,KAAK;SACjB,CACF,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,WAAW,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACzC,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,0EAA0E;YAC1E,0EAA0E;YAC1E,8EAA8E;YAC9E,4EAA4E;YAC5E,2EAA2E;YAC3E,6EAA6E;YAC7E,6EAA6E;YAC7E,4EAA4E;YAC5E,6EAA6E;YAC7E,gDAAgD;YAChD,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;YACtE,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,GAAG;oBACF,aAAa,EAAE,IAAI;oBACnB,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;oBACtC,GAAG,EAAE,IAAI,EAAE,0DAA0D;oBACrE,IAAI;oBACJ,YAAY,EAAE,IAAI,GAAG,EAAU;oBAC/B,gBAAgB,EAAE,CAAC;oBACnB,eAAe,EAAE,CAAC;oBAClB,mBAAmB,EAAE,IAAI;oBACzB,YAAY,EAAE,EAAE;oBAChB,QAAQ,EAAE,IAAI;iBACf,CAAC;gBACF,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;YACxB,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC;YAC5B,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI;gBAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,mBAAmB,KAAK,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC7E,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;oBAClB,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;oBAC9B,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;oBACpC,MAAM;oBACN,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO;YAAE,MAAM;QACxC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO;YAAE,aAAa,GAAG,IAAI,CAAC;IAC3E,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,SAAS,CAAC;SAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe;YACzC,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB;YAC3C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACjD,OAAO,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEL,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,iCAAiC;IACxE,MAAM,QAAQ,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;IAE3D,6EAA6E;IAC7E,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,eAAe,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/C,YAAY,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,aAAa;gBAAE,SAAS;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC;oBAChC,KAAK,EAAE,CAAC,CAAC,aAAa;oBACtB,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,EAAE;iBACT,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;gBAChB,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,oEAAoE;gBACpE,uEAAuE;gBACvE,8DAA8D;gBAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;gBACzC,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,GAAG,CAAC;oBACjB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CACnB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAChE,CAAC;gBACJ,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC;gBACvB,IAAI,SAAS;oBAAE,YAAY,EAAE,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,wCAAwC;gBACxC,YAAY,GAAG,IAAI,CAAC;gBACpB,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,UAAU,GAAG,SAAS;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACjC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IAEN,uEAAuE;IACvE,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAEpD,6EAA6E;IAC7E,MAAM,KAAK,GAAa,CAAC,kBAAkB,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CACR,qEAAqE,SAAS,eAAe,WAAW,gLAAgL,CACzR,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,OAAO,SAAS,iTAAiT,CAClU,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,iCAAiC,UAAU,sDAAsD,WAAW,uGAAuG,CACpN,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,qBAAqB,aAAa,eAAe,SAAS,CAAC,MAAM,+DAA+D,YAAY,CAAC,CAAC,CAAC,eAAe,SAAS,2DAA2D,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,6BAA6B,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,4WAA4W,CACrqB,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CACR,wLAAwL,CACzL,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,2JAA2J,CAC5J,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CACR,iIAAiI,CAClI,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,GAAG,eAAe,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,IAAI,aAAa,CAAC;IAE3C,OAAO,QAAQ,CACb;QACE,UAAU;QACV,IAAI;QACJ,IAAI;QACJ,KAAK;KACN,EACD;QACE,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,UAAU,CAAC,MAAM;QAC3B,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,cAAc,EAAE,IAAI;QACpB,SAAS;QACT,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;YAC7C,OAAO;SACR;QACD,cAAc;QACd,cAAc;QACd,sEAAsE;QACtE,yEAAyE;QACzE,iBAAiB,EAAE;YACjB,uCAAuC;YACvC,kDAAkD;SACnD;QACD,KAAK;KACN,CACF,CAAC;AACJ,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,83 @@
+/**
+ * @cliwant/mcp-sam-gov/keys — API-key discovery + `.env` auto-loading.
+ *
+ * Why this exists
+ * ----------------
+ * The server rides 31 federal sources. MOST are fully keyless. But the set of
+ * *optional* keys (raise a rate limit, unlock one filter) plus the two *required*
+ * keys (Census business-patterns, FRED) has grown to the point where a user — or
+ * the AI driving the server — cannot tell, without reading source code:
+ *   - which env var each source reads,
+ *   - whether a key is REQUIRED or merely OPTIONAL,
+ *   - where to get one (free), and
+ *   - whether it is currently configured.
+ *
+ * `apiKeyStatus()` answers all four, truthfully, WITHOUT ever revealing a key's
+ * value (only a `currentlySet` boolean). `loadDotEnv()` lets a user configure
+ * keys ONCE in a `.env` file instead of the host's env block.
+ *
+ * Grounding: every `envVar` below is the exact string the code reads via
+ * `process.env.<NAME>` — DATA_GOV_API_KEY (datagovKey.ts), SAM_GOV_API_KEY
+ * (server.ts), BLS_API_KEY (bls.ts), NVD_API_KEY (nvd.ts), SOCRATA_APP_TOKEN
+ * (socrata.ts), CENSUS_API_KEY (census-economic.ts), FRED_API_KEY (fred.ts).
+ * No invented keys, sources, or signup URLs.
+ */
+/** One registry entry describing a single API key the server can use. */
+export type KeyRegistryEntry = {
+    /** The exact `process.env.<NAME>` the code reads. */
+    envVar: string;
+    /** Human-readable source(s) this key affects. */
+    sources: string[];
+    /** true ⇒ the source has NO keyless tier (the tool throws without it). */
+    required: boolean;
+    /** Free signup URL (the user creates the account — this is their step). */
+    signupUrl: string;
+    /** What setting the key unlocks (higher limit / a filter / a whole tool). */
+    unlocks: string;
+    /** Extra honesty note (keyless fallback, precedence, scope). */
+    note: string;
+};
+/**
+ * The 7 keys the server reads — code-grounded, no inventions.
+ *
+ * REQUIRED (2): CENSUS_API_KEY, FRED_API_KEY — those sources have no keyless
+ * tier, so the tool throws without them. OPTIONAL (5): everything else works
+ * keyless; a key only raises a rate limit or unlocks a single filter.
+ */
+export declare const KEY_REGISTRY: readonly KeyRegistryEntry[];
+/** Per-key status: the registry entry + a `currentlySet` boolean. NEVER the value. */
+export type KeyStatus = KeyRegistryEntry & {
+    currentlySet: boolean;
+};
+/** The `apiKeyStatus()` result shape. */
+export type ApiKeyStatusResult = {
+    keys: KeyStatus[];
+    /** envVars of REQUIRED keys not currently set (empty ⇒ all required keys present). */
+    requiredMissing: string[];
+    /** envVars of OPTIONAL keys not currently set. */
+    optionalMissing: string[];
+    /** Every key here is free to obtain. */
+    allKeysFree: boolean;
+};
+/**
+ * Report which API keys the server can use and whether each is configured.
+ *
+ * SECURITY: the returned object carries ONLY a `currentlySet` boolean per key —
+ * the key's VALUE is NEVER read into the output. (`isSet` inspects the value to
+ * compute the boolean, but the value itself never leaves this function.)
+ */
+export declare function apiKeyStatus(): ApiKeyStatusResult;
+/**
+ * MINIMAL, dependency-free `.env` loader.
+ *
+ * Reads `${cwd||process.cwd()}/.env` if present and sets `process.env[KEY]` for
+ * each `KEY=VALUE` line — but ONLY if that key is not already set, so a real
+ * environment variable always wins over `.env` (standard precedence). Supports
+ * `export KEY=VALUE`, `#` comments, blank lines, and surrounding single/double
+ * quotes on the value. NEVER throws: a missing file returns 0 (⇒ byte-identical
+ * startup), and a malformed line is skipped rather than fatal.
+ *
+ * @returns the number of vars newly set into process.env.
+ */
+export declare function loadDotEnv(cwd?: string): number;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,yEAAyE;AACzE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;IAClB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,gBAAgB,EAiE1C,CAAC;AAQX,sFAAsF;AACtF,MAAM,MAAM,SAAS,GAAG,gBAAgB,GAAG;IAAE,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAErE,yCAAyC;AACzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,sFAAsF;IACtF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kDAAkD;IAClD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,wCAAwC;IACxC,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,kBAAkB,CAYjD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CA4C/C"}

package/dist/keys.js

@@ -0,0 +1,173 @@
+/**
+ * @cliwant/mcp-sam-gov/keys — API-key discovery + `.env` auto-loading.
+ *
+ * Why this exists
+ * ----------------
+ * The server rides 31 federal sources. MOST are fully keyless. But the set of
+ * *optional* keys (raise a rate limit, unlock one filter) plus the two *required*
+ * keys (Census business-patterns, FRED) has grown to the point where a user — or
+ * the AI driving the server — cannot tell, without reading source code:
+ *   - which env var each source reads,
+ *   - whether a key is REQUIRED or merely OPTIONAL,
+ *   - where to get one (free), and
+ *   - whether it is currently configured.
+ *
+ * `apiKeyStatus()` answers all four, truthfully, WITHOUT ever revealing a key's
+ * value (only a `currentlySet` boolean). `loadDotEnv()` lets a user configure
+ * keys ONCE in a `.env` file instead of the host's env block.
+ *
+ * Grounding: every `envVar` below is the exact string the code reads via
+ * `process.env.<NAME>` — DATA_GOV_API_KEY (datagovKey.ts), SAM_GOV_API_KEY
+ * (server.ts), BLS_API_KEY (bls.ts), NVD_API_KEY (nvd.ts), SOCRATA_APP_TOKEN
+ * (socrata.ts), CENSUS_API_KEY (census-economic.ts), FRED_API_KEY (fred.ts).
+ * No invented keys, sources, or signup URLs.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * The 7 keys the server reads — code-grounded, no inventions.
+ *
+ * REQUIRED (2): CENSUS_API_KEY, FRED_API_KEY — those sources have no keyless
+ * tier, so the tool throws without them. OPTIONAL (5): everything else works
+ * keyless; a key only raises a rate limit or unlocks a single filter.
+ */
+export const KEY_REGISTRY = [
+    {
+        envVar: "DATA_GOV_API_KEY",
+        sources: [
+            "api.data.gov keyed sources: Regulations.gov, Congress.gov, GovInfo, Federal Audit Clearinghouse (FAC), data.gov catalog",
+        ],
+        required: false,
+        signupUrl: "https://api.data.gov/signup/",
+        unlocks: "higher rate limits on the api.data.gov keyed sources (lifts the shared DEMO_KEY ~30/hr cap to ~1,000/hr)",
+        note: "Keyless by default via the public DEMO_KEY; a key only raises the shared hourly quota. (NPPES, CMS, and Federal Register are keyless on their own hosts and do NOT use this key.)",
+    },
+    {
+        envVar: "SAM_GOV_API_KEY",
+        sources: ["SAM.gov opportunities"],
+        required: false,
+        signupUrl: "https://open.gsa.gov/api/get-opportunities-public-api/",
+        unlocks: "the authenticated v2 opportunity search + the organization-name filter",
+        note: "Keyless HAL endpoint works without it; a key enables the keyed v2 path and org-name filtering. Register at sam.gov / api.sam.gov.",
+    },
+    {
+        envVar: "BLS_API_KEY",
+        sources: ["Bureau of Labor Statistics (BLS)"],
+        required: false,
+        signupUrl: "https://data.bls.gov/registrationEngine/",
+        unlocks: "the BLS v2 tier (~500 queries/day, 50 series/query, ~20-year span) vs keyless v1 (~25 queries/day)",
+        note: "Keyless v1 works out of the box; a key upgrades to the higher v2 limits.",
+    },
+    {
+        envVar: "NVD_API_KEY",
+        sources: ["NIST NVD (cve_lookup)"],
+        required: false,
+        signupUrl: "https://nvd.nist.gov/developers/request-an-api-key",
+        unlocks: "a higher NVD rate limit",
+        note: "Keyless by default; a key lifts the request rate limit.",
+    },
+    {
+        envVar: "SOCRATA_APP_TOKEN",
+        sources: ["Socrata (state/city open-data portals)"],
+        required: false,
+        signupUrl: "https://evergreen.data.socrata.com/signup",
+        unlocks: "higher Socrata throttling limits",
+        note: "Keyless by default; a token raises the per-host throttle. Any Socrata portal's developer settings issues one.",
+    },
+    {
+        envVar: "CENSUS_API_KEY",
+        sources: ["US Census (census_business_patterns)"],
+        required: true,
+        signupUrl: "https://api.census.gov/data/key_signup.html",
+        unlocks: "the census_business_patterns tool (there is no keyless tier — it throws without a key)",
+        note: "REQUIRED: the Census economic API has no keyless access.",
+    },
+    {
+        envVar: "FRED_API_KEY",
+        sources: ["FRED (fred_search_series, fred_series_observations)"],
+        required: true,
+        signupUrl: "https://fred.stlouisfed.org/docs/api/api_key.html",
+        unlocks: "the 2 FRED tools (there is no keyless tier — they throw without a key)",
+        note: "REQUIRED: the FRED API has no keyless access.",
+    },
+];
+/** true iff the env var is set to a non-empty (after-trim) string. */
+function isSet(envVar) {
+    const v = process.env[envVar];
+    return typeof v === "string" && v.trim().length > 0;
+}
+/**
+ * Report which API keys the server can use and whether each is configured.
+ *
+ * SECURITY: the returned object carries ONLY a `currentlySet` boolean per key —
+ * the key's VALUE is NEVER read into the output. (`isSet` inspects the value to
+ * compute the boolean, but the value itself never leaves this function.)
+ */
+export function apiKeyStatus() {
+    const keys = KEY_REGISTRY.map((k) => ({
+        ...k,
+        currentlySet: isSet(k.envVar),
+    }));
+    const requiredMissing = keys
+        .filter((k) => k.required && !k.currentlySet)
+        .map((k) => k.envVar);
+    const optionalMissing = keys
+        .filter((k) => !k.required && !k.currentlySet)
+        .map((k) => k.envVar);
+    return { keys, requiredMissing, optionalMissing, allKeysFree: true };
+}
+/**
+ * MINIMAL, dependency-free `.env` loader.
+ *
+ * Reads `${cwd||process.cwd()}/.env` if present and sets `process.env[KEY]` for
+ * each `KEY=VALUE` line — but ONLY if that key is not already set, so a real
+ * environment variable always wins over `.env` (standard precedence). Supports
+ * `export KEY=VALUE`, `#` comments, blank lines, and surrounding single/double
+ * quotes on the value. NEVER throws: a missing file returns 0 (⇒ byte-identical
+ * startup), and a malformed line is skipped rather than fatal.
+ *
+ * @returns the number of vars newly set into process.env.
+ */
+export function loadDotEnv(cwd) {
+    const path = join(cwd ?? process.cwd(), ".env");
+    let text;
+    try {
+        text = readFileSync(path, "utf8");
+    }
+    catch {
+        // Missing / unreadable .env ⇒ zero change. This is the common case and
+        // MUST be a no-op so startup is byte-identical when no .env exists.
+        return 0;
+    }
+    let loaded = 0;
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line.length === 0 || line.startsWith("#"))
+            continue;
+        // Optional `export ` prefix.
+        const body = line.startsWith("export ")
+            ? line.slice("export ".length).trim()
+            : line;
+        const eq = body.indexOf("=");
+        if (eq <= 0)
+            continue; // no `=`, or empty key ⇒ skip (malformed).
+        const key = body.slice(0, eq).trim();
+        if (!key)
+            continue;
+        let value = body.slice(eq + 1).trim();
+        // Strip a single matching pair of surrounding quotes.
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        // Precedence: if the key is already set in the real environment, it wins —
+        // we set `process.env[key]` ONLY when it is not already present.
+        if (process.env[key] !== undefined)
+            continue;
+        process.env[key] = value;
+        loaded++;
+    }
+    return loaded;
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgC;IACvD;QACE,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE;YACP,yHAAyH;SAC1H;QACD,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,8BAA8B;QACzC,OAAO,EACL,0GAA0G;QAC5G,IAAI,EAAE,mLAAmL;KAC1L;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,QAAQ,EAAE,KAAK;QACf,SAAS,EACP,wDAAwD;QAC1D,OAAO,EACL,wEAAwE;QAC1E,IAAI,EAAE,mIAAmI;KAC1I;IACD;QACE,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,CAAC,kCAAkC,CAAC;QAC7C,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,0CAA0C;QACrD,OAAO,EACL,oGAAoG;QACtG,IAAI,EAAE,0EAA0E;KACjF;IACD;QACE,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,oDAAoD;QAC/D,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,yDAAyD;KAChE;IACD;QACE,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,CAAC,wCAAwC,CAAC;QACnD,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,2CAA2C;QACtD,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EAAE,+GAA+G;KACtH;IACD;QACE,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,CAAC,sCAAsC,CAAC;QACjD,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,6CAA6C;QACxD,OAAO,EACL,wFAAwF;QAC1F,IAAI,EAAE,0DAA0D;KACjE;IACD;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,CAAC,qDAAqD,CAAC;QAChE,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,mDAAmD;QAC9D,OAAO,EACL,wEAAwE;QAC1E,IAAI,EAAE,+CAA+C;KACtD;CACO,CAAC;AAEX,sEAAsE;AACtE,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACtD,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,IAAI,GAAgB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC;QACJ,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;KAC9B,CAAC,CAAC,CAAC;IACJ,MAAM,eAAe,GAAG,IAAI;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,eAAe,GAAG,IAAI;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,oEAAoE;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAExD,6BAA6B;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS,CAAC,2CAA2C;QAElE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,sDAAsD;QACtD,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,2EAA2E;QAC3E,iEAAiE;QACjE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/meta.d.ts

@@ -0,0 +1,165 @@
+/**
+ * @cliwant/mcp-sam-gov/meta — the `_meta` completeness/provenance convention.
+ *
+ * Why this exists
+ * ----------------
+ * These tools' outputs are consumed by an AI, not a human who can eyeball
+ * a table. For an AI consumer, silently-misleading data is strictly worse
+ * than missing data: the AI cannot tell a filtered-but-blank field from a
+ * genuinely-empty one, a hard cap from a complete list, or a swallowed
+ * error from a real zero — and will state the wrong answer confidently.
+ *
+ * Every tool's success payload therefore gains a sibling `_meta` object.
+ * `data` is UNCHANGED (backward compat): the envelope becomes
+ * `{ ok, data, _meta }` where existing consumers reading `ok`/`data.*`
+ * are 100% unaffected.
+ *
+ * See docs/research/02-truthful-outputs-spec.md §2 for the normative spec.
+ */
+/** Two-phase (enrich) tools: rows lost to failed per-record enrichment. */
+export type MetaDegraded = {
+    attempted: number;
+    succeeded: number;
+    failed: number;
+};
+/** Offset-based pagination descriptor for list/search/aggregate tools. */
+export type MetaPagination = {
+    /**
+     * The row offset of this page. `number` for offset-paginated tools (unchanged —
+     * every existing tool sets an integer). ADR-0010: widened to `number | null` for
+     * OPAQUE-CURSOR tools (GovInfo), where no meaningful numeric offset exists — those
+     * tools set `offset:null` (the honest "not a numeric offset"; continuation is via
+     * `_meta.nextCursor`, not a numeric `nextOffset`). Additive: no existing tool changes.
+     */
+    offset: number | null;
+    limit: number;
+    nextOffset: number | null;
+    hasMore: boolean;
+};
+/**
+ * The normative `_meta` shape (spec §2.1). Rides alongside `data` in the
+ * success envelope so the AI can branch on completeness/provenance
+ * deterministically instead of guessing from null fields.
+ */
+export type ResponseMeta = {
+    /** Human+machine label of the upstream + layer that served THIS response. */
+    source: string;
+    /** SAM tools: true when no SAM_GOV_API_KEY. Non-SAM tools: always true. */
+    keylessMode: boolean;
+    /** true iff this response contains the ENTIRE result set for the query. */
+    complete: boolean;
+    /** true iff a hard cap / top-N limited the rows. */
+    truncated: boolean;
+    /** Number of primary records in `data`. */
+    returned: number;
+    /** Upstream's total match count; null when the endpoint doesn't report it. */
+    totalAvailable: number | null;
+    /**
+     * Present (and true) when `totalAvailable` is a KNOWN LOWER BOUND rather than
+     * an exact count — i.e. the upstream reported the total as "≥ N" (e.g. SEC
+     * EDGAR full-text search returns `hits.total.relation: "gte"` with the value
+     * pinned at 10000). The true total is UNKNOWN and ≥ `totalAvailable`. Absent
+     * on endpoints that report an exact total (do NOT read absence as `false`
+     * meaning "exact" for tools that never set it — it is simply not applicable).
+     */
+    totalIsLowerBound?: boolean;
+    /**
+     * Present (and true) when `totalAvailable` (or, for CKAN, the value disclosed
+     * in `notes`) is an upstream STATISTICAL ESTIMATE rather than an exact count —
+     * i.e. the source reported the total as an approximation that may be ABOVE OR
+     * BELOW the true count (CKAN `datastore_search` returns `total_was_estimated:
+     * true` for a PostgreSQL `reltuples`-style estimate, live-verified to overshoot
+     * — so it is NOT a lower bound, unlike `totalIsLowerBound`). CKAN sets this on
+     * the estimated path alongside `totalAvailable:null` (the estimate never drives
+     * pagination — ADR-0006 B1) + a disclosing note carrying the estimate value.
+     * Absent on endpoints that report an exact total (do NOT read absence as
+     * `false` meaning "exact" for tools that never set it — it is not applicable).
+     */
+    totalIsEstimated?: boolean;
+    /**
+     * Present when this response comes from an OPAQUE-CURSOR-paginated source
+     * (ADR-0010 — GovInfo's `offsetMark`): the opaque continuation token to pass back
+     * to fetch the NEXT page (GovInfo: as the `pageMark` argument), or `null` on the
+     * last page (no further cursor). It is a source-minted token, NOT derived from any
+     * secret and NEVER the raw upstream `nextPage` URL (which embeds pageSize + the
+     * api_key). Cursor tools set `nextOffset:null`/`offset:null` (a numeric offset is
+     * meaningless for a cursor) and use THIS as the sole continuation surface. Absent
+     * on offset-paginated tools (do NOT read absence as "no more" for those). Added as
+     * a conditional passthrough exactly like totalIsLowerBound/totalIsEstimated —
+     * only surfaced when the tool provides it, so existing tools' `_meta` stays
+     * byte-identical and the tools/list snapshot is unaffected (it is a runtime `_meta`
+     * field, not part of any tool's input schema).
+     */
+    nextCursor?: string | null;
+    /** Request filters the upstream verifiably honored. */
+    filtersApplied: string[];
+    /** Request filters sent but NOT honored (results are unfiltered on these). */
+    filtersDropped: string[];
+    /** Fields null/absent BY LIMITATION (keyless/endpoint), not "no data". */
+    fieldsUnavailable: string[];
+    /** Two-phase tools only: rows for which per-record detail was fetched. */
+    enrichedCount?: number;
+    /** Two-phase tools: enrichment accounting (see MetaDegraded). */
+    degraded?: MetaDegraded;
+    /** Present on list/search/aggregate tools. */
+    pagination?: MetaPagination;
+    /**
+     * P5 PROVENANCE (ADR-0045 B2/M1). The access path that served THIS response:
+     * `"live"` (the current, and in Phase 1 the ONLY, path) or `"snapshot"` (a
+     * self-hosted cache served when the live upstream was unreachable). Set by the
+     * resilience port's provenance-returning primitive, then threaded by the
+     * adapter ONLY when NON-live — so a live response OMITS this field entirely and
+     * stays byte-identical to pre-P5 output. Surfaced via the guarded
+     * `if (partial.dataPath !== undefined)` passthrough below (NO `??` default).
+     * Absent ⇒ live; do NOT read absence as any other value. Freshness enum, not a
+     * topology label (M2): an independent host serving live data is still `"live"`.
+     */
+    dataPath?: "live" | "snapshot";
+    /**
+     * P5 FRESHNESS (ADR-0045 m3). ISO-8601 UTC timestamp of when a NON-live
+     * (`snapshot`) body was retrieved from the origin — the as-of instant for
+     * deterministic cross-tool freshness comparison. Present ONLY alongside a
+     * non-live `dataPath`; absent on a live response (byte-identical). When a
+     * snapshot carries a `totalAvailable`, it is qualified as an as-of figure via
+     * the existing `totalIsEstimated` flag (m1 forbids a dedicated `totalAsOf`
+     * field — the only NEW P5 fields are `dataPath` and `asOf`).
+     */
+    asOf?: string;
+    /** Short, AI-actionable caveats (natural language). */
+    notes: string[];
+};
+/**
+ * Build a fully-populated, invariant-consistent ResponseMeta from a partial.
+ *
+ * Safe defaults (spec §2.1): a tool that supplies nothing gets a truthful,
+ * "single-record / known-complete" meta (`complete:true, truncated:false`).
+ *
+ * The server (or the caller) hands over whatever it knows; this helper fills
+ * the rest and then ENFORCES the §2.1 invariants so the flags the AI trusts
+ * are internally consistent:
+ *   - `complete === true`  ⟺  NOT truncated AND filtersDropped empty AND
+ *     (no pagination OR hasMore===false) AND (no degraded OR failed===0).
+ *   - If totalAvailable is known and returned < totalAvailable ⇒
+ *     complete:false, truncated:true.
+ *   - filtersDropped non-empty ⇒ at least one note is present.
+ */
+export declare function buildMeta(partial?: Partial<ResponseMeta>): ResponseMeta;
+/**
+ * Branded wrapper a tool handler returns to attach `_meta` to its payload.
+ *
+ * A handler may return either its raw domain object (server synthesizes a
+ * minimal truthful default) OR `withMeta(data, partialMeta)`. The brand lets
+ * the server distinguish "handler attached meta" from "domain object that
+ * happens to have `data`/`_meta` keys" with zero ambiguity.
+ */
+export declare class MetaBundle<T = unknown> {
+    readonly data: T;
+    readonly meta: Partial<ResponseMeta>;
+    readonly __isMetaBundle: true;
+    constructor(data: T, meta: Partial<ResponseMeta>);
+}
+/** Attach a partial `_meta` to a handler's `data`. Server finalizes it. */
+export declare function withMeta<T>(data: T, meta: Partial<ResponseMeta>): MetaBundle<T>;
+/** Type guard: did the handler hand back a MetaBundle? */
+export declare function isMetaBundle(v: unknown): v is MetaBundle;
+//# sourceMappingURL=meta.d.ts.map

package/dist/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG;IAC3B;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uDAAuD;IACvD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,OAAO,CAAC,YAAY,CAAM,GAAG,YAAY,CA6G3E;AAED;;;;;;;GAOG;AACH,qBAAa,UAAU,CAAC,CAAC,GAAG,OAAO;IAG/B,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC;IAHtC,QAAQ,CAAC,cAAc,EAAG,IAAI,CAAU;gBAE7B,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC;CAEvC;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,CAAC,EACxB,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAC1B,UAAU,CAAC,CAAC,CAAC,CAEf;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAMxD"}

package/dist/meta.js

@@ -0,0 +1,162 @@
+/**
+ * @cliwant/mcp-sam-gov/meta — the `_meta` completeness/provenance convention.
+ *
+ * Why this exists
+ * ----------------
+ * These tools' outputs are consumed by an AI, not a human who can eyeball
+ * a table. For an AI consumer, silently-misleading data is strictly worse
+ * than missing data: the AI cannot tell a filtered-but-blank field from a
+ * genuinely-empty one, a hard cap from a complete list, or a swallowed
+ * error from a real zero — and will state the wrong answer confidently.
+ *
+ * Every tool's success payload therefore gains a sibling `_meta` object.
+ * `data` is UNCHANGED (backward compat): the envelope becomes
+ * `{ ok, data, _meta }` where existing consumers reading `ok`/`data.*`
+ * are 100% unaffected.
+ *
+ * See docs/research/02-truthful-outputs-spec.md §2 for the normative spec.
+ */
+/**
+ * Build a fully-populated, invariant-consistent ResponseMeta from a partial.
+ *
+ * Safe defaults (spec §2.1): a tool that supplies nothing gets a truthful,
+ * "single-record / known-complete" meta (`complete:true, truncated:false`).
+ *
+ * The server (or the caller) hands over whatever it knows; this helper fills
+ * the rest and then ENFORCES the §2.1 invariants so the flags the AI trusts
+ * are internally consistent:
+ *   - `complete === true`  ⟺  NOT truncated AND filtersDropped empty AND
+ *     (no pagination OR hasMore===false) AND (no degraded OR failed===0).
+ *   - If totalAvailable is known and returned < totalAvailable ⇒
+ *     complete:false, truncated:true.
+ *   - filtersDropped non-empty ⇒ at least one note is present.
+ */
+export function buildMeta(partial = {}) {
+    const source = partial.source ?? "unknown";
+    const keylessMode = partial.keylessMode ?? true;
+    const returned = partial.returned ?? 0;
+    const totalAvailable = partial.totalAvailable === undefined ? null : partial.totalAvailable;
+    const filtersApplied = partial.filtersApplied ?? [];
+    const filtersDropped = partial.filtersDropped ?? [];
+    const fieldsUnavailable = partial.fieldsUnavailable ?? [];
+    const notes = partial.notes ? [...partial.notes] : [];
+    const pagination = partial.pagination;
+    const degraded = partial.degraded;
+    // --- Derive truncated -------------------------------------------------
+    // A known total that exceeds what we returned proves truncation.
+    const totalProvesTruncation = totalAvailable !== null && returned < totalAvailable;
+    const paginationHasMore = pagination ? pagination.hasMore : false;
+    let truncated = partial.truncated ?? (totalProvesTruncation || paginationHasMore);
+    if (totalProvesTruncation || paginationHasMore)
+        truncated = true;
+    // --- P5 provenance (ADR-0045 B2/M1) -----------------------------------
+    // A NON-live response (a snapshot served because the live upstream was
+    // unreachable) is honesty-qualified below. For a live/absent dataPath this
+    // whole strand is INERT — `nonLiveProvenance` is false, so `complete`, the
+    // notes[], and totalIsEstimated are all derived EXACTLY as before P5 (Phase 1:
+    // no adapter threads a dataPath ⇒ byte-identical output on every one of the
+    // 110 tools).
+    const nonLiveProvenance = partial.dataPath !== undefined && partial.dataPath !== "live";
+    // --- Derive complete (single source of truth = the §2.1 invariant) ----
+    const degradedLoss = degraded ? degraded.failed > 0 : false;
+    const derivedComplete = !truncated &&
+        filtersDropped.length === 0 &&
+        !paginationHasMore &&
+        !degradedLoss &&
+        !totalProvesTruncation &&
+        // M1a: `complete` is defined against the LIVE result set (:53), so a snapshot
+        // can NEVER claim complete:true — gate the derivation behind a live/absent
+        // dataPath. (Inert for live: `!false` === true, no change.)
+        !nonLiveProvenance;
+    // Honor an explicit complete:false, but never let a caller claim
+    // complete:true when the invariant says otherwise.
+    const complete = partial.complete === false ? false : derivedComplete;
+    // --- Invariant: filtersDropped non-empty ⇒ a note explaining it -------
+    if (filtersDropped.length > 0 && notes.length === 0) {
+        notes.push(`The following requested filters were NOT applied by the upstream and the results are unfiltered on them: ${filtersDropped.join(", ")}. Treat these results as unfiltered on those facets.`);
+    }
+    // --- P5 (ADR-0045 M1c/m1): staleness note on a non-live response ------
+    // Push into the EXISTING notes[] (m1 killed the separate `stalenessNote`
+    // field). Inert for live/absent dataPath. Names the as-of instant when known.
+    if (nonLiveProvenance) {
+        const asOfPhrase = partial.asOf ? ` (as of ${partial.asOf})` : "";
+        notes.push(`Live upstream was unreachable — this response is served from a ${partial.dataPath} snapshot${asOfPhrase}. Freshness is NOT guaranteed; treat completeness and totals as of the snapshot time, not live.`);
+    }
+    const meta = {
+        source,
+        keylessMode,
+        complete,
+        truncated,
+        returned,
+        totalAvailable,
+        filtersApplied,
+        filtersDropped,
+        fieldsUnavailable,
+        notes,
+    };
+    if (partial.enrichedCount !== undefined)
+        meta.enrichedCount = partial.enrichedCount;
+    if (degraded)
+        meta.degraded = degraded;
+    if (pagination)
+        meta.pagination = pagination;
+    // Conditional passthrough (like enrichedCount/pagination): only surfaced when
+    // the tool provides it, so existing tools' `_meta` output stays byte-identical.
+    if (partial.totalIsLowerBound !== undefined)
+        meta.totalIsLowerBound = partial.totalIsLowerBound;
+    // Conditional passthrough (identical shape to totalIsLowerBound above): only
+    // surfaced when the tool provides it (CKAN's estimated-total path), so every
+    // existing tool's `_meta` output stays byte-identical. NO new derivation logic.
+    if (partial.totalIsEstimated !== undefined)
+        meta.totalIsEstimated = partial.totalIsEstimated;
+    // Conditional passthrough (IDENTICAL shape to totalIsLowerBound/totalIsEstimated
+    // above): only surfaced when the tool provides it (GovInfo's opaque-cursor path),
+    // so every existing tool's `_meta` output stays byte-identical. NO new derivation
+    // logic — the value (the offsetMark token, or null on the last page) is set by the
+    // cursor tool and passed through verbatim.
+    if (partial.nextCursor !== undefined)
+        meta.nextCursor = partial.nextCursor;
+    // P5 provenance passthrough (ADR-0045 B2) — IDENTICAL guarded idiom to
+    // totalIsLowerBound/nextCursor above: surfaced ONLY when the adapter provides
+    // it, so every existing (live, dataPath-absent) tool `_meta` stays
+    // byte-identical. NO `??` default. In Phase 1 no adapter threads these ⇒ inert.
+    if (partial.dataPath !== undefined)
+        meta.dataPath = partial.dataPath;
+    if (partial.asOf !== undefined)
+        meta.asOf = partial.asOf;
+    // M1b: a snapshot's totalAvailable is an as-of figure, NOT a live exact total —
+    // qualify it via the EXISTING totalIsEstimated flag (m1 forbids a new
+    // totalAsOf field) so an AI never reads it as a live count. Only when a total
+    // is actually present. Inert for live (nonLiveProvenance false).
+    if (nonLiveProvenance && totalAvailable !== null)
+        meta.totalIsEstimated = true;
+    return meta;
+}
+/**
+ * Branded wrapper a tool handler returns to attach `_meta` to its payload.
+ *
+ * A handler may return either its raw domain object (server synthesizes a
+ * minimal truthful default) OR `withMeta(data, partialMeta)`. The brand lets
+ * the server distinguish "handler attached meta" from "domain object that
+ * happens to have `data`/`_meta` keys" with zero ambiguity.
+ */
+export class MetaBundle {
+    data;
+    meta;
+    __isMetaBundle = true;
+    constructor(data, meta) {
+        this.data = data;
+        this.meta = meta;
+    }
+}
+/** Attach a partial `_meta` to a handler's `data`. Server finalizes it. */
+export function withMeta(data, meta) {
+    return new MetaBundle(data, meta);
+}
+/** Type guard: did the handler hand back a MetaBundle? */
+export function isMetaBundle(v) {
+    return (typeof v === "object" &&
+        v !== null &&
+        v.__isMetaBundle === true);
+}
+//# sourceMappingURL=meta.js.map