@ekwo-ai/mcp 0.4.0

package/dist/columns.js

@@ -0,0 +1,422 @@
+/**
+ * What each tool reads back, written once.
+ *
+ * Two rules run through every list. A `numeric` column is asked for as
+ * `amount::text`, so the exact decimal arrives rather than a float; a `date`
+ * or a timestamp likewise, so `2026-06-15` is a string on both routes instead
+ * of whatever a driver decided a date object should be. Everything else —
+ * uuid, text, boolean, integer — crosses unchanged.
+ */
+export const COMPANY = [
+    'id',
+    'name',
+    'trade_name',
+    'legal_name',
+    'legal_form',
+    'country',
+    'fiscal_country',
+    'vat_number',
+    'registration_number',
+    'address_line1',
+    'address_line2',
+    'postal_code',
+    'city',
+    'country',
+    'region',
+    'email',
+    'phone',
+    'website',
+    'logo_url',
+    'share_capital::text',
+    'share_capital_currency',
+    'activity_code',
+    'activity_scheme',
+    'document_template',
+    'default_bank_account_id',
+    'language',
+    'currency_code',
+    'lock_date::text',
+    'tax_lock_date::text',
+    'receivable_account_id',
+    'payable_account_id',
+    'suspense_account_id',
+    'retained_earnings_account_id',
+    'sales_journal_id',
+    'purchase_journal_id',
+    'miscellaneous_journal_id',
+];
+export const FISCAL_YEAR = ['id', 'name', 'start_date::text', 'end_date::text', 'is_closed'];
+export const ACCOUNT = [
+    'id',
+    'code',
+    'name',
+    'account_type',
+    'internal_group',
+    'reconcilable',
+    'currency_code',
+    'deprecated',
+];
+export const JOURNAL = ['id', 'code', 'name', 'journal_type', 'active'];
+export const CONTACT = [
+    'id',
+    'name',
+    'contact_type',
+    'vat_number',
+    'auxiliary_code',
+    'email',
+    'country',
+    'payment_terms_days',
+    'receivable_account_id',
+    'payable_account_id',
+    'active',
+];
+export const TAX = [
+    'id',
+    'code',
+    'name',
+    'amount::text',
+    'amount_type',
+    'applies_to',
+    'treatment',
+    'vat_category',
+    'valid_from::text',
+    'valid_to::text',
+    'legal_reference',
+    // The generalised engine. `tax_kind` and `jurisdiction` say what a tax is
+    // where the code alone would have to be guessed at; `recoverable` and
+    // `price_include` change what a client should show; `cash_basis` is here so
+    // a reader is not surprised by it once cash-basis VAT starts writing it.
+    'tax_kind',
+    'recoverable',
+    'jurisdiction',
+    'price_include',
+    'cash_basis',
+    'active',
+];
+export const DOCUMENT = [
+    'id',
+    'company_id',
+    'doc_type',
+    'state',
+    'payment_state',
+    'number',
+    'supplier_reference',
+    'contact_id',
+    'journal_id',
+    'document_date::text',
+    'accounting_date::text',
+    'due_date::text',
+    'currency_code',
+    'amount_untaxed::text',
+    'amount_tax::text',
+    'amount_total::text',
+    'amount_paid::text',
+    'amount_residual::text',
+    'entry_id',
+    'sent_at::text',
+];
+/**
+ * The mentions the law of a country puts on one document, from the view that
+ * decides which of them apply. `text_i18n` crosses as it is: a renderer picks
+ * the language, and the server has no business choosing one.
+ */
+export const DOCUMENT_LEGAL_MENTION = [
+    'code',
+    'applies_when',
+    'text',
+    'text_i18n',
+    'sequence',
+    'legal_reference',
+];
+/**
+ * What the country of a document requires of it, beside the mentions: the
+ * payment term the law sets, how the number is built, when the tax falls due
+ * and how the document is exchanged. Read from `country_defaults`, which
+ * holds null wherever the pack has said nothing — and null is the answer, not
+ * an invitation to substitute another country's.
+ */
+export const COUNTRY_DOCUMENT_RULES = [
+    'country',
+    'numbering_gapless',
+    'number_format',
+    'legal_payment_days',
+    'late_payment_reference',
+    'tax_point_rule',
+    'einvoice_profile',
+    'einvoice_mandatory_from::text',
+    'party_scheme',
+    'vat_scheme',
+];
+/**
+ * The header of a document, from the view that assembles it: the seller, the
+ * buyer, the amounts, where it is paid and what the country of the document
+ * requires. `document_line_items` is the lines and `document_legal_mentions`
+ * the sentences — three reads, and no client holding a copy of the
+ * letterhead.
+ */
+export const DOCUMENT_HEADER = [
+    'document_id',
+    'company_id',
+    'doc_type',
+    'state',
+    'payment_state',
+    'number',
+    'supplier_reference',
+    'document_date::text',
+    'accounting_date::text',
+    'due_date::text',
+    'delivery_date::text',
+    'currency_code',
+    'amount_untaxed::text',
+    'amount_tax::text',
+    'amount_total::text',
+    'amount_paid::text',
+    'amount_residual::text',
+    'payment_terms',
+    'payment_means_code',
+    'payment_reference',
+    'buyer_reference',
+    'order_reference',
+    'contract_reference',
+    'project_reference',
+    'note',
+    'payee_iban',
+    'payee_bic',
+    'seller_name',
+    'seller_legal_name',
+    'seller_legal_form',
+    'seller_vat_number',
+    'seller_registration_number',
+    'seller_address_line1',
+    'seller_address_line2',
+    'seller_postal_code',
+    'seller_city',
+    'seller_country',
+    'seller_email',
+    'seller_phone',
+    'seller_website',
+    'seller_logo_url',
+    'seller_share_capital::text',
+    'seller_share_capital_currency',
+    'seller_activity_code',
+    'seller_activity_scheme',
+    'document_template',
+    'buyer_id',
+    'buyer_name',
+    'buyer_vat_number',
+    'buyer_registration_number',
+    'buyer_address_line1',
+    'buyer_address_line2',
+    'buyer_postal_code',
+    'buyer_city',
+    'buyer_country',
+    'buyer_email',
+    'country',
+    'number_format',
+    'numbering_gapless',
+    'legal_payment_days',
+    'late_payment_reference',
+    'tax_point_rule',
+    'einvoice_profile',
+    'einvoice_mandatory_from::text',
+    'party_scheme',
+    'vat_scheme',
+];
+export const PRODUCT = [
+    'id',
+    'company_id',
+    'code',
+    'name',
+    'description',
+    'kind',
+    'unit_code',
+    'currency_code',
+    'sale_price::text',
+    'purchase_price::text',
+    'sale_account_id',
+    'purchase_account_id',
+    'sale_tax_id',
+    'purchase_tax_id',
+    'active',
+];
+export const DOCUMENT_LINE = [
+    'id',
+    'document_id',
+    'sequence',
+    'line_type',
+    'name',
+    'description',
+    'product_id',
+    'quantity::text',
+    'unit_code',
+    'unit_price::text',
+    'discount_percent::text',
+    'tax_id',
+    'account_id',
+    'vat_category',
+    'vat_rate::text',
+    'amount_untaxed::text',
+];
+export const ENTRY = [
+    'id',
+    'company_id',
+    'journal_id',
+    'number',
+    'entry_date::text',
+    'reference',
+    'description',
+    'state',
+    'kind',
+    'document_id',
+    'total_debit::text',
+    'total_credit::text',
+    'is_balanced',
+    'posted_at::text',
+];
+export const ENTRY_LINE = [
+    'id',
+    'entry_id',
+    'account_id',
+    'sequence',
+    'name',
+    'debit::text',
+    'credit::text',
+    'balance::text',
+    'contact_id',
+    'date_maturity::text',
+    'tax_id',
+    'tax_line',
+    'declaration_box',
+    'box_amount::text',
+    'matching_number',
+    'matched_amount::text',
+    // The currency of the line and its amount in it, written whenever that
+    // currency is not the company's. A client matching two foreign lines needs
+    // both: that is the scale the matching is worked out on.
+    'currency_code',
+    'amount_currency::text',
+];
+export const BANK_ACCOUNT = [
+    'id',
+    'name',
+    'iban',
+    'bic',
+    'bank_name',
+    'currency_code',
+    'account_id',
+    'journal_id',
+    'active',
+];
+export const BANK_TRANSACTION = [
+    'id',
+    'company_id',
+    'bank_account_id',
+    'statement_id',
+    'transaction_date::text',
+    'value_date::text',
+    'amount::text',
+    'currency_code',
+    'description',
+    'counterpart_name',
+    'counterpart_iban',
+    'reference',
+    'structured_reference',
+    'contact_id',
+    'entry_id',
+    'state',
+];
+export const PAYMENT = [
+    'id',
+    'company_id',
+    'direction',
+    'payment_date::text',
+    'amount::text',
+    'currency_code',
+    'contact_id',
+    'journal_id',
+    'bank_account_id',
+    'entry_id',
+    'reference',
+    'memo',
+    'state',
+];
+/**
+ * An invitation, without its secret. `token_hash` is deliberately absent: it
+ * is of no use to a client, and a list of hashes is a thing to leak rather
+ * than a thing to show.
+ */
+/** What one person chose for themselves. Null everywhere is the fresh state. */
+export const USER_PREFERENCES = [
+    'user_id',
+    'preferred_company_id',
+    'language',
+    'timezone',
+    'date_display_format',
+    'number_display_format',
+    'theme',
+    'updated_at::text',
+];
+export const INVITATION = [
+    'id',
+    'company_id',
+    'email',
+    'role',
+    'capabilities_granted',
+    'invited_by',
+    'created_at::text',
+    'expires_at::text',
+    'accepted_at::text',
+    'accepted_by',
+    'revoked_at::text',
+];
+/** A machine key, without its hash. The secret is returned once, elsewhere. */
+export const API_KEY = [
+    'id',
+    'company_id',
+    'name',
+    'prefix',
+    'capabilities',
+    'created_by',
+    'created_at::text',
+    'expires_at::text',
+    'last_used_at::text',
+    'revoked_at::text',
+];
+export const INSTANCE = [
+    'instance_id',
+    'organization_name',
+    'country',
+    'edition',
+    'schema_version',
+    'installed_at::text',
+    'registered_at::text',
+];
+export const RECONCILIATION = [
+    'id',
+    'debit_line_id',
+    'credit_line_id',
+    'amount::text',
+    'matching_number',
+    'matched_at::text',
+    // What the matching revealed, when it revealed something: the entry that
+    // booked the realised exchange difference, and the one that moved the share
+    // of a cash-basis tax the settlement made due. A client that shows a
+    // matching shows what it caused.
+    'fx_entry_id',
+    'tax_transfer_entry_id',
+];
+export const AUDIT_LOG = [
+    'id',
+    'occurred_at::text',
+    'actor_id',
+    'api_key_id',
+    'company_id',
+    'table_name',
+    'record_id',
+    'record_key',
+    'operation',
+    'action',
+    'old_values',
+    'new_values',
+];
+//# sourceMappingURL=columns.js.map

package/dist/columns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"columns.js","sourceRoot":"","sources":["../src/columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,YAAY;IACZ,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,wBAAwB;IACxB,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,yBAAyB;IACzB,UAAU;IACV,eAAe;IACf,iBAAiB;IACjB,qBAAqB;IACrB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,8BAA8B;IAC9B,kBAAkB;IAClB,qBAAqB;IACrB,0BAA0B;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAE7F,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,MAAM;IACN,MAAM;IACN,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,YAAY;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,MAAM;IACN,cAAc;IACd,YAAY;IACZ,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,oBAAoB;IACpB,uBAAuB;IACvB,oBAAoB;IACpB,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI;IACJ,MAAM;IACN,MAAM;IACN,cAAc;IACd,aAAa;IACb,YAAY;IACZ,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,UAAU;IACV,aAAa;IACb,cAAc;IACd,eAAe;IACf,YAAY;IACZ,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI;IACJ,YAAY;IACZ,UAAU;IACV,OAAO;IACP,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,YAAY;IACZ,YAAY;IACZ,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,eAAe;IACf,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,UAAU;IACV,eAAe;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,MAAM;IACN,cAAc;IACd,MAAM;IACN,WAAW;IACX,UAAU;IACV,iBAAiB;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS;IACT,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,wBAAwB;IACxB,gBAAgB;IAChB,kBAAkB;IAClB,+BAA+B;IAC/B,cAAc;IACd,YAAY;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,aAAa;IACb,YAAY;IACZ,UAAU;IACV,OAAO;IACP,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,qBAAqB;IACrB,eAAe;IACf,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,eAAe;IACf,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,MAAM;IACN,YAAY;IACZ,WAAW;IACX,aAAa;IACb,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,4BAA4B;IAC5B,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,4BAA4B;IAC5B,+BAA+B;IAC/B,sBAAsB;IACtB,wBAAwB;IACxB,mBAAmB;IACnB,UAAU;IACV,YAAY;IACZ,kBAAkB;IAClB,2BAA2B;IAC3B,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,aAAa;IACb,SAAS;IACT,eAAe;IACf,mBAAmB;IACnB,oBAAoB;IACpB,wBAAwB;IACxB,gBAAgB;IAChB,kBAAkB;IAClB,+BAA+B;IAC/B,cAAc;IACd,YAAY;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,YAAY;IACZ,MAAM;IACN,MAAM;IACN,aAAa;IACb,MAAM;IACN,WAAW;IACX,eAAe;IACf,kBAAkB;IAClB,sBAAsB;IACtB,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;IACb,iBAAiB;IACjB,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI;IACJ,aAAa;IACb,UAAU;IACV,WAAW;IACX,MAAM;IACN,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,kBAAkB;IAClB,wBAAwB;IACxB,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,sBAAsB;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI;IACJ,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,WAAW;IACX,aAAa;IACb,OAAO;IACP,MAAM;IACN,aAAa;IACb,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,iBAAiB;CAClB,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI;IACJ,UAAU;IACV,YAAY;IACZ,UAAU;IACV,MAAM;IACN,aAAa;IACb,cAAc;IACd,eAAe;IACf,YAAY;IACZ,qBAAqB;IACrB,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACtB,uEAAuE;IACvE,2EAA2E;IAC3E,yDAAyD;IACzD,eAAe;IACf,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,WAAW;IACX,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI;IACJ,YAAY;IACZ,iBAAiB;IACjB,cAAc;IACd,wBAAwB;IACxB,kBAAkB;IAClB,cAAc;IACd,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,WAAW;IACX,sBAAsB;IACtB,YAAY;IACZ,UAAU;IACV,OAAO;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,YAAY;IACZ,WAAW;IACX,oBAAoB;IACpB,cAAc;IACd,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,WAAW;IACX,MAAM;IACN,OAAO;CACR,CAAC;AAEF;;;;GAIG;AACH,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS;IACT,sBAAsB;IACtB,UAAU;IACV,UAAU;IACV,qBAAqB;IACrB,uBAAuB;IACvB,OAAO;IACP,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI;IACJ,YAAY;IACZ,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,YAAY;IACZ,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,aAAa;IACb,kBAAkB;CACnB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI;IACJ,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,aAAa;IACb,mBAAmB;IACnB,SAAS;IACT,SAAS;IACT,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI;IACJ,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,iCAAiC;IACjC,aAAa;IACb,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI;IACJ,mBAAmB;IACnB,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Where the server gets its connection, and what it refuses.
+ *
+ * Two modes, and the order matters. **PostgREST with the user's own session**
+ * is the recommended one: `SUPABASE_URL` and `SUPABASE_ANON_KEY` with either a
+ * password or an access token, and row level security decides everything from
+ * there. **A direct Postgres connection** is the fallback for a self-hosted
+ * installation; it demands `EKWO_ACT_AS_USER_ID` precisely because a database
+ * connection is nobody, and a server acting as nobody would be acting as the
+ * owner.
+ *
+ * The one thing this file exists to refuse is a `service_role` key. It would
+ * work — that is the problem. Every policy in the schema would be bypassed,
+ * and an assistant that can read every company of an installation is not the
+ * thing anybody asked for. It is refused wherever it can arrive, and there are
+ * two doors, not one: `SUPABASE_ANON_KEY` is the obvious paste, and
+ * `EKWO_ACCESS_TOKEN` is the quiet one — it goes into the `Authorization`
+ * header, which is what PostgREST reads for the role, so a service_role key
+ * put there overrides a perfectly good anon key sitting next to it.
+ */
+import { isServiceRoleKey } from '@ekwo-ai/core';
+import { type Backend } from './backend.js';
+export interface Config {
+    mode: 'postgrest' | 'sql';
+    supabaseUrl?: string;
+    anonKey?: string;
+    email?: string;
+    password?: string;
+    accessToken?: string;
+    dbUrl?: string;
+    actAsUserId?: string;
+}
+export declare const ENV: {
+    readonly dbUrl: "EKWO_DB_URL";
+    readonly actAsUserId: "EKWO_ACT_AS_USER_ID";
+    readonly supabaseUrl: "SUPABASE_URL";
+    readonly anonKey: "SUPABASE_ANON_KEY";
+    readonly email: "EKWO_EMAIL";
+    readonly password: "EKWO_PASSWORD";
+    readonly accessToken: "EKWO_ACCESS_TOKEN";
+};
+export { isServiceRoleKey };
+/** Reads the environment, and says what is missing rather than failing later. */
+export declare function readConfig(env?: NodeJS.ProcessEnv): Config;
+/** Opens the backend the configuration describes. The caller closes it. */
+export declare function openBackend(config: Config): Promise<Backend>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAgB,gBAAgB,EAAsB,MAAM,eAAe,CAAC;AACnF,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAI1D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,WAAW,GAAG,KAAK,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,GAAG;;;;;;;;CAIN,CAAC;AAUX,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAS5B,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CA2DvE;AAED,2EAA2E;AAC3E,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYlE"}

package/dist/config.js

@@ -0,0 +1,102 @@
+/**
+ * Where the server gets its connection, and what it refuses.
+ *
+ * Two modes, and the order matters. **PostgREST with the user's own session**
+ * is the recommended one: `SUPABASE_URL` and `SUPABASE_ANON_KEY` with either a
+ * password or an access token, and row level security decides everything from
+ * there. **A direct Postgres connection** is the fallback for a self-hosted
+ * installation; it demands `EKWO_ACT_AS_USER_ID` precisely because a database
+ * connection is nobody, and a server acting as nobody would be acting as the
+ * owner.
+ *
+ * The one thing this file exists to refuse is a `service_role` key. It would
+ * work — that is the problem. Every policy in the schema would be bypassed,
+ * and an assistant that can read every company of an installation is not the
+ * thing anybody asked for. It is refused wherever it can arrive, and there are
+ * two doors, not one: `SUPABASE_ANON_KEY` is the obvious paste, and
+ * `EKWO_ACCESS_TOKEN` is the quiet one — it goes into the `Authorization`
+ * header, which is what PostgREST reads for the role, so a service_role key
+ * put there overrides a perfectly good anon key sitting next to it.
+ */
+import { IDENTITY_ENV, isServiceRoleKey, serviceRoleRefusal } from '@ekwo-ai/core';
+import { EkwoMcpError } from './backend.js';
+import { postgrestBackend } from './postgrest.js';
+import { connect, sqlBackend } from './sql.js';
+export const ENV = {
+    ...IDENTITY_ENV,
+    dbUrl: 'EKWO_DB_URL',
+    actAsUserId: 'EKWO_ACT_AS_USER_ID',
+};
+const SURFACE = 'this server';
+const SIGN_IN = `sign in, or set ${IDENTITY_ENV.email} and ${IDENTITY_ENV.password} and let this server sign in for you`;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+// The test and the sentence moved to the core, where the command line reads
+// them too: which key is refused cannot be decided twice. Still exported from
+// here, as it always was.
+export { isServiceRoleKey };
+function trimmed(env, name) {
+    const value = env[name];
+    if (value === undefined)
+        return undefined;
+    const text = value.trim();
+    return text.length === 0 ? undefined : text;
+}
+/** Reads the environment, and says what is missing rather than failing later. */
+export function readConfig(env = process.env) {
+    const dbUrl = trimmed(env, ENV.dbUrl);
+    if (dbUrl !== undefined) {
+        const actAsUserId = trimmed(env, ENV.actAsUserId);
+        if (actAsUserId === undefined) {
+            throw new EkwoMcpError(`missing_act_as_user: ${ENV.dbUrl} needs ${ENV.actAsUserId}. A database connection is nobody — auth.uid() is null and row level security is bypassed rather than satisfied — so this server refuses to run without the user it acts for.`);
+        }
+        if (!UUID.test(actAsUserId)) {
+            throw new EkwoMcpError(`bad_act_as_user: ${ENV.actAsUserId} must be the auth.users id of a real user, as a uuid.`);
+        }
+        return { mode: 'sql', dbUrl, actAsUserId };
+    }
+    const supabaseUrl = trimmed(env, ENV.supabaseUrl);
+    const anonKey = trimmed(env, ENV.anonKey);
+    if (supabaseUrl === undefined || anonKey === undefined) {
+        throw new EkwoMcpError(`missing_configuration: set ${ENV.supabaseUrl} and ${ENV.anonKey}, plus either ${ENV.email} and ${ENV.password} or ${ENV.accessToken}. For a self-hosted database, set ${ENV.dbUrl} and ${ENV.actAsUserId} instead.`);
+    }
+    if (isServiceRoleKey(anonKey)) {
+        throw new EkwoMcpError(serviceRoleRefusal(ENV.anonKey, 'apikey', SURFACE, SIGN_IN));
+    }
+    const accessToken = trimmed(env, ENV.accessToken);
+    // The second door. `postgrestBackend` puts this straight into
+    // `Authorization: Bearer`, and PostgREST takes the role from that header and
+    // not from `apikey` — so a service_role token here bypasses every policy
+    // exactly as it would in the slot above, while the anon key next to it makes
+    // the configuration look right.
+    if (accessToken !== undefined && isServiceRoleKey(accessToken)) {
+        throw new EkwoMcpError(serviceRoleRefusal(ENV.accessToken, 'authorization', SURFACE, SIGN_IN));
+    }
+    const email = trimmed(env, ENV.email);
+    const password = trimmed(env, ENV.password);
+    if (accessToken === undefined && (email === undefined || password === undefined)) {
+        throw new EkwoMcpError(`missing_credentials: set ${ENV.email} and ${ENV.password}, or ${ENV.accessToken}. This server has no identity of its own; it acts as the person using it.`);
+    }
+    return {
+        mode: 'postgrest',
+        supabaseUrl,
+        anonKey,
+        ...(accessToken !== undefined ? { accessToken } : {}),
+        ...(email !== undefined ? { email } : {}),
+        ...(password !== undefined ? { password } : {}),
+    };
+}
+/** Opens the backend the configuration describes. The caller closes it. */
+export async function openBackend(config) {
+    if (config.mode === 'sql') {
+        const db = await connect(config.dbUrl);
+        return sqlBackend(db, { userId: config.actAsUserId });
+    }
+    return postgrestBackend({
+        supabaseUrl: config.supabaseUrl,
+        anonKey: config.anonKey,
+        accessToken: config.accessToken,
+        email: config.email,
+        password: config.password,
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,YAAY,EAAgB,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAa/C,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,YAAY;IACf,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,qBAAqB;CAC1B,CAAC;AAEX,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,OAAO,GAAG,mBAAmB,YAAY,CAAC,KAAK,QAAQ,YAAY,CAAC,QAAQ,sCAAsC,CAAC;AAEzH,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,4EAA4E;AAC5E,8EAA8E;AAC9E,0BAA0B;AAC1B,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B,SAAS,OAAO,CAAC,GAAsB,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,YAAY,CACpB,wBAAwB,GAAG,CAAC,KAAK,UAAU,GAAG,CAAC,WAAW,+KAA+K,CAC1O,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,GAAG,CAAC,WAAW,uDAAuD,CAC3F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CACpB,8BAA8B,GAAG,CAAC,WAAW,QAAQ,GAAG,CAAC,OAAO,iBAAiB,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC,QAAQ,OAAO,GAAG,CAAC,WAAW,qCAAqC,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC,WAAW,WAAW,CACrN,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CACpB,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,8DAA8D;IAC9D,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,gCAAgC;IAChC,IAAI,WAAW,KAAK,SAAS,IAAI,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,YAAY,CACpB,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,YAAY,CACpB,4BAA4B,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC,QAAQ,QAAQ,GAAG,CAAC,WAAW,2EAA2E,CAC5J,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW;QACX,OAAO;QACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAqB,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC,WAAqB;QACzC,OAAO,EAAE,MAAM,CAAC,OAAiB;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/format.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Amounts as decimal strings, everywhere, in both directions.
+ *
+ * Postgres holds `numeric` exactly and hands it over as text; a table read
+ * asks for `amount::text` so that is what arrives. The one place a float can
+ * appear is a function result crossing PostgREST as JSON, where `1210.00`
+ * becomes a number before any code of ours sees it. `money()` puts it back to
+ * two decimals, which is exact for every amount a ledger holds, and a model
+ * reading `"1210.00"` never has to wonder whether `1210.0000000001` was the
+ * VAT rounding or the transport.
+ */
+export type Decimal = string;
+/** A numeric, as the decimal string the ledger holds. */
+export declare function money(value: unknown): Decimal | null;
+/** The same, for a quantity or a rate, where two decimals would be a lie. */
+export declare function decimal(value: unknown): Decimal | null;
+/** Applies `money()` to the named keys of every row. */
+export declare function moneyFields<T extends Record<string, unknown>>(rows: T[], keys: string[]): T[];
+/** An amount on its way into the database: `"1210.00"`, never 1210.0000001. */
+export declare function amountIn(value: string | number): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B,yDAAyD;AACzD,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAKpD;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAItD;AAED,wDAAwD;AACxD,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAQ7F;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAMvD"}

package/dist/format.js

@@ -0,0 +1,49 @@
+/**
+ * Amounts as decimal strings, everywhere, in both directions.
+ *
+ * Postgres holds `numeric` exactly and hands it over as text; a table read
+ * asks for `amount::text` so that is what arrives. The one place a float can
+ * appear is a function result crossing PostgREST as JSON, where `1210.00`
+ * becomes a number before any code of ours sees it. `money()` puts it back to
+ * two decimals, which is exact for every amount a ledger holds, and a model
+ * reading `"1210.00"` never has to wonder whether `1210.0000000001` was the
+ * VAT rounding or the transport.
+ */
+import { EkwoMcpError } from './backend.js';
+import { roundCurrency } from './rounding.js';
+/** A numeric, as the decimal string the ledger holds. */
+export function money(value) {
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === 'number')
+        return roundCurrency(value, 2).toFixed(2);
+    const text = String(value);
+    return text.length === 0 ? null : text;
+}
+/** The same, for a quantity or a rate, where two decimals would be a lie. */
+export function decimal(value) {
+    if (value === null || value === undefined)
+        return null;
+    const text = String(value);
+    return text.length === 0 ? null : text;
+}
+/** Applies `money()` to the named keys of every row. */
+export function moneyFields(rows, keys) {
+    return rows.map((row) => {
+        const out = { ...row };
+        for (const key of keys) {
+            if (key in out)
+                out[key] = money(out[key]);
+        }
+        return out;
+    });
+}
+/** An amount on its way into the database: `"1210.00"`, never 1210.0000001. */
+export function amountIn(value) {
+    const text = typeof value === 'number' ? roundCurrency(value, 2).toFixed(2) : value.trim();
+    if (!/^-?\d+(\.\d+)?$/.test(text)) {
+        throw new EkwoMcpError(`bad_amount: ${String(value)} is not a decimal amount`);
+    }
+    return text;
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAI9C,yDAAyD;AACzD,MAAM,UAAU,KAAK,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,WAAW,CAAoC,IAAS,EAAE,IAAc;IACtF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,GAAG,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,GAAG;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,KAAsB;IAC7C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3F,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}