@ekwo-ai/mcp 0.4.0

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The server as a library.
+ *
+ * Exported so the tests can call every tool handler directly against a real
+ * Postgres — the same functions the protocol calls — and so another host can
+ * mount this server on a transport of its own instead of shelling out to
+ * `npx`.
+ */
+export { EkwoMcpError, explain, socleCode, type Backend, type Filter, type Order, type Row, type SelectQuery, } from './backend.js';
+export { ENV, isServiceRoleKey, openBackend, readConfig, type Config } from './config.js';
+export { amountIn, decimal, money, moneyFields, type Decimal } from '@ekwo-ai/core';
+export { connect, sqlBackend, type SqlBackendOptions, type SqlClient } from './sql.js';
+export { postgrestBackend, type PostgrestBackendOptions } from './postgrest.js';
+export { SERVER_NAME, SERVER_VERSION, buildServer, type ServerOptions } from './server.js';
+export { SCHEMA_MIN, assertSchemaSupported, installedSchemaVersion } from './schema.js';
+export * as readTools from './tools/read.js';
+export * as writeTools from './tools/write.js';
+export { MODULE_TOOLSETS, installedModules, toolsetsFor, type ModuleTool, type ModuleToolset, } from './tools/modules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,EACT,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,GAAG,EACR,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * The server as a library.
+ *
+ * Exported so the tests can call every tool handler directly against a real
+ * Postgres — the same functions the protocol calls — and so another host can
+ * mount this server on a transport of its own instead of shelling out to
+ * `npx`.
+ */
+export { EkwoMcpError, explain, socleCode, } from './backend.js';
+export { ENV, isServiceRoleKey, openBackend, readConfig } from './config.js';
+export { amountIn, decimal, money, moneyFields } from '@ekwo-ai/core';
+export { connect, sqlBackend } from './sql.js';
+export { postgrestBackend } from './postgrest.js';
+export { SERVER_NAME, SERVER_VERSION, buildServer } from './server.js';
+export { SCHEMA_MIN, assertSchemaSupported, installedSchemaVersion } from './schema.js';
+export * as readTools from './tools/read.js';
+export * as writeTools from './tools/write.js';
+export { MODULE_TOOLSETS, installedModules, toolsetsFor, } from './tools/modules.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,GAMV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAe,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAgB,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAA0C,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAgC,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,GAGZ,MAAM,oBAAoB,CAAC"}

package/dist/postgrest.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The recommended backend: PostgREST, with the user's own session.
+ *
+ * Supabase already turns the schema into a REST API with an OpenAPI
+ * description, and row level security decides what each request may see. So
+ * this server holds no privileges of its own: it signs in as the person using
+ * it — or is handed their access token — and everything it can do afterwards
+ * is what that person can do. There is no service_role path here, on purpose.
+ * A server that could read every company would turn "an AI keeps my books"
+ * into "an AI holds the keys to everybody's books".
+ *
+ * `@supabase/supabase-js` does two things this package deliberately does not
+ * hand-write: the password grant with its token refresh, and the query string
+ * PostgREST expects. Both are the part that cannot be tested here — no test
+ * talks to a Supabase project — and a library that is known to work is worth
+ * more than code of ours that is merely untested.
+ */
+import { type Backend } from './backend.js';
+export interface PostgrestBackendOptions {
+    supabaseUrl: string;
+    anonKey: string;
+    /** A session already in hand. Otherwise sign in with the two below. */
+    accessToken?: string | undefined;
+    email?: string | undefined;
+    password?: string | undefined;
+}
+/**
+ * Signs in, or takes the token it was given, and returns the backend.
+ *
+ * With an email and a password the client keeps the session in memory and
+ * refreshes it on its own; nothing is written to disk, so a long-running
+ * server outlives the first hour without a credential cache existing.
+ */
+export declare function postgrestBackend(options: PostgrestBackendOptions): Promise<Backend>;
+//# sourceMappingURL=postgrest.d.ts.map

package/dist/postgrest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgrest.d.ts","sourceRoot":"","sources":["../src/postgrest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAIL,KAAK,OAAO,EAIb,MAAM,cAAc,CAAC;AAuDtB,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkHzF"}

package/dist/postgrest.js

@@ -0,0 +1,152 @@
+/**
+ * The recommended backend: PostgREST, with the user's own session.
+ *
+ * Supabase already turns the schema into a REST API with an OpenAPI
+ * description, and row level security decides what each request may see. So
+ * this server holds no privileges of its own: it signs in as the person using
+ * it — or is handed their access token — and everything it can do afterwards
+ * is what that person can do. There is no service_role path here, on purpose.
+ * A server that could read every company would turn "an AI keeps my books"
+ * into "an AI holds the keys to everybody's books".
+ *
+ * `@supabase/supabase-js` does two things this package deliberately does not
+ * hand-write: the password grant with its token refresh, and the query string
+ * PostgREST expects. Both are the part that cannot be tested here — no test
+ * talks to a Supabase project — and a library that is known to work is worth
+ * more than code of ours that is merely untested.
+ */
+import { createClient } from '@supabase/supabase-js';
+import { EkwoMcpError, explain, identifier, } from './backend.js';
+function applyFilters(builder, filters) {
+    let out = builder;
+    for (const filter of filters ?? []) {
+        const column = identifier(filter.column);
+        switch (filter.op) {
+            case 'is':
+                out = out.is(column, null);
+                break;
+            case 'in':
+                out = out.in(column, filter.value);
+                break;
+            case 'ilike':
+                out = out.ilike(column, filter.value);
+                break;
+            default:
+                out = out[filter.op](column, filter.value);
+        }
+    }
+    return out;
+}
+/** Unwraps a PostgREST answer, letting the schema's own message through. */
+function unwrap(answer, what) {
+    if (answer.error !== null) {
+        const { message, details, hint } = answer.error;
+        // `details` is where Postgres puts the rest of a raise; keep it.
+        const full = [message, details, hint].filter((part) => typeof part === 'string' && part.length > 0).join(' — ');
+        throw explain(full.length > 0 ? full : `${what} failed`);
+    }
+    if (answer.data === null) {
+        throw new EkwoMcpError(`${what}: nothing came back`);
+    }
+    return answer.data;
+}
+/**
+ * Signs in, or takes the token it was given, and returns the backend.
+ *
+ * With an email and a password the client keeps the session in memory and
+ * refreshes it on its own; nothing is written to disk, so a long-running
+ * server outlives the first hour without a credential cache existing.
+ */
+export async function postgrestBackend(options) {
+    const headers = {};
+    if (options.accessToken !== undefined && options.accessToken.length > 0) {
+        headers['Authorization'] = `Bearer ${options.accessToken}`;
+    }
+    const client = createClient(options.supabaseUrl, options.anonKey, {
+        auth: {
+            persistSession: false,
+            autoRefreshToken: options.accessToken === undefined,
+            detectSessionInUrl: false,
+        },
+        global: { headers },
+    });
+    let actingAs;
+    if (options.accessToken === undefined || options.accessToken.length === 0) {
+        if (options.email === undefined || options.password === undefined) {
+            throw new EkwoMcpError('no_credentials: set EKWO_EMAIL and EKWO_PASSWORD, or EKWO_ACCESS_TOKEN');
+        }
+        const { data, error } = await client.auth.signInWithPassword({
+            email: options.email,
+            password: options.password,
+        });
+        if (error !== null) {
+            throw new EkwoMcpError(`sign_in_failed: ${error.message}`);
+        }
+        actingAs = data.user?.id;
+    }
+    else {
+        const { data } = await client.auth.getUser(options.accessToken);
+        actingAs = data.user?.id;
+    }
+    /**
+     * The client, pointed at one schema.
+     *
+     * PostgREST serves a schema other than `public` through the `Accept-Profile`
+     * and `Content-Profile` headers, which `supabase-js` sets for you through
+     * `.schema()`. It answers 406 for a schema the project does not expose, and
+     * no migration can expose one — `ekwo module enable` prints the line to add.
+     */
+    const on = (schema) => schema === undefined ? client : client.schema(identifier(schema));
+    return {
+        mode: 'postgrest',
+        actingAs,
+        async rpc(fn, args = {}, schema) {
+            const answer = (await on(schema).rpc(identifier(fn), args));
+            const data = unwrap(answer, fn);
+            // A function returning one composite row comes back as an object, a
+            // set-returning one as an array. Tools see an array either way.
+            return (Array.isArray(data) ? data : [data]);
+        },
+        async rpcVoid(fn, args = {}, schema) {
+            const answer = (await on(schema).rpc(identifier(fn), args));
+            if (answer.error !== null) {
+                throw explain(answer.error.message);
+            }
+        },
+        async select(query) {
+            let builder = on(query.schema).from(identifier(query.table)).select(query.columns.join(','));
+            builder = applyFilters(builder, query.where);
+            for (const order of query.order ?? []) {
+                builder = builder.order(identifier(order.column), { ascending: order.ascending !== false });
+            }
+            if (query.limit !== undefined)
+                builder = builder.limit(query.limit);
+            return unwrap((await builder), `select from ${query.table}`);
+        },
+        async insert(table, rows, returning = ['*'], schema) {
+            const answer = (await on(schema)
+                .from(identifier(table))
+                .insert(rows)
+                .select(returning.join(',')));
+            return unwrap(answer, `insert into ${table}`);
+        },
+        async update(table, patch, where, returning = ['*'], schema) {
+            let builder = on(schema).from(identifier(table)).update(patch);
+            builder = applyFilters(builder, where);
+            const answer = (await builder.select(returning.join(',')));
+            return unwrap(answer, `update ${table}`);
+        },
+        async remove(table, where, schema) {
+            let builder = on(schema).from(identifier(table)).delete();
+            builder = applyFilters(builder, where);
+            const answer = (await builder);
+            if (answer.error !== null)
+                throw explain(answer.error.message);
+        },
+        async close() {
+            // Stops the refresh timer; there is no socket to give back.
+            await client.auth.stopAutoRefresh();
+        },
+    };
+}
+//# sourceMappingURL=postgrest.js.map

package/dist/postgrest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgrest.js","sourceRoot":"","sources":["../src/postgrest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EACL,YAAY,EACZ,OAAO,EACP,UAAU,GAKX,MAAM,cAAc,CAAC;AAetB,SAAS,YAAY,CAA0B,OAAU,EAAE,OAA6B;IACtF,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;YAClB,KAAK,IAAI;gBACP,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,IAAI;gBACP,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAc,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,OAAO;gBACV,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,MAAM;YACR;gBACE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,KAAc,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,4EAA4E;AAC5E,SAAS,MAAM,CAAI,MAAiB,EAAE,IAAY;IAChD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;QAChD,iEAAiE;QACjE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChH,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,MAAM,GAAmB,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;QAChF,IAAI,EAAE;YACJ,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,OAAO,CAAC,WAAW,KAAK,SAAS;YACnD,kBAAkB,EAAE,KAAK;SAC1B;QACD,MAAM,EAAE,EAAE,OAAO,EAAE;KACpB,CAAC,CAAC;IAEH,IAAI,QAA4B,CAAC;IAEjC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,YAAY,CACpB,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC3D,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,YAAY,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChE,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,EAAE,GAAG,CAAC,MAA0B,EAAiB,EAAE,CACvD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAA8B,CAAC;IAElG,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,QAAQ;QAER,KAAK,CAAC,GAAG,CAAI,EAAU,EAAE,OAAgC,EAAE,EAAE,MAAe;YAC1E,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAoB,CAAC;YAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,oEAAoE;YACpE,gEAAgE;YAChE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAQ,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAAgC,EAAE,EAAE,MAAe;YAC3E,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAoB,CAAC;YAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAI,KAAkB;YAChC,IAAI,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7F,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACtC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,CAAgB,EAAE,eAAe,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,IAAW,EACX,YAAsB,CAAC,GAAG,CAAC,EAC3B,MAAe;YAEf,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;iBAC7B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;iBACvB,MAAM,CAAC,IAAI,CAAC;iBACZ,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAgB,CAAC;YAC/C,OAAO,MAAM,CAAC,MAAM,EAAE,eAAe,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,KAAU,EACV,KAAe,EACf,YAAsB,CAAC,GAAG,CAAC,EAC3B,MAAe;YAEf,IAAI,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAgB,CAAC;YAC1E,OAAO,MAAM,CAAC,MAAM,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAe,EAAE,MAAe;YAC1D,IAAI,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAoB,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,KAAK;YACT,4DAA4D;YAC5D,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/rounding.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The one rounding rule of Ekwo: **half up, on the absolute value, at the
+ * currency's decimals**.
+ *
+ * Three packages used to answer this differently — `Math.round((v + EPSILON) *
+ * 100) / 100`, `Math.round(v * 100) / 100` and `Number.prototype.toFixed(2)` —
+ * and the three disagreed on the two cases that matter: a negative half, where
+ * `Math.round` goes towards positive infinity and turns -0.005 into -0.00, and
+ * a value a binary float cannot hold, where 2.675 becomes 2.67 because
+ * `2.675 * 100` is really 267.49999999999994. A credit note is a sale with the
+ * sign flipped; a rule that treats the two differently puts a cent between an
+ * invoice and its credit note, and the cent is found by the person filing the
+ * return.
+ *
+ * Half up on the absolute value is what an invoice, a VAT return and a set of
+ * annual accounts are written with, and it is symmetric by construction: the
+ * rounding of -x is the rounding of x with the sign put back.
+ *
+ * The file is deliberately identical in every package that holds a copy. A
+ * format brick may not import the core or another brick, so the rule is
+ * duplicated rather than shared — and `tests/rounding.test.ts` reads the
+ * copies and refuses one that has drifted. See `docs/decisions.md`.
+ */
+export declare function roundCurrency(value: number, decimals?: number): number;
+//# sourceMappingURL=rounding.d.ts.map

package/dist/rounding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rounding.d.ts","sourceRoot":"","sources":["../src/rounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,MAAM,CAUjE"}

package/dist/rounding.js

@@ -0,0 +1,35 @@
+/**
+ * The one rounding rule of Ekwo: **half up, on the absolute value, at the
+ * currency's decimals**.
+ *
+ * Three packages used to answer this differently — `Math.round((v + EPSILON) *
+ * 100) / 100`, `Math.round(v * 100) / 100` and `Number.prototype.toFixed(2)` —
+ * and the three disagreed on the two cases that matter: a negative half, where
+ * `Math.round` goes towards positive infinity and turns -0.005 into -0.00, and
+ * a value a binary float cannot hold, where 2.675 becomes 2.67 because
+ * `2.675 * 100` is really 267.49999999999994. A credit note is a sale with the
+ * sign flipped; a rule that treats the two differently puts a cent between an
+ * invoice and its credit note, and the cent is found by the person filing the
+ * return.
+ *
+ * Half up on the absolute value is what an invoice, a VAT return and a set of
+ * annual accounts are written with, and it is symmetric by construction: the
+ * rounding of -x is the rounding of x with the sign put back.
+ *
+ * The file is deliberately identical in every package that holds a copy. A
+ * format brick may not import the core or another brick, so the rule is
+ * duplicated rather than shared — and `tests/rounding.test.ts` reads the
+ * copies and refuses one that has drifted. See `docs/decisions.md`.
+ */
+export function roundCurrency(value, decimals = 2) {
+    const factor = 10 ** decimals;
+    const scaled = Math.abs(value) * factor;
+    // The nudge is proportional to the number, which is what makes it work at
+    // 1.005 and at 1000000.005 alike, and far too small to move a value that is
+    // not already within a bit of the halfway point.
+    const rounded = Math.round(scaled + Number.EPSILON * scaled);
+    // `-0` is a value of its own in JavaScript and it prints as "-0.00".
+    // Adding zero turns it back into `0`.
+    return (value < 0 ? -rounded : rounded) / factor + 0;
+}
+//# sourceMappingURL=rounding.js.map

package/dist/rounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rounding.js","sourceRoot":"","sources":["../src/rounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAQ,GAAG,CAAC;IACvD,MAAM,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IACxC,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IAC7D,qEAAqE;IACrE,sCAAsC;IACtC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,28 @@
+/**
+ * What this server needs of the database it is pointed at.
+ *
+ * An MCP client is installed by whoever wants an assistant, and the database
+ * it reaches was installed by whoever runs the books — two decisions, two
+ * dates. So the server asks the schema its version before it answers anything,
+ * and refuses one it is too new for, by name. The alternative is what an
+ * assistant does with a missing column: it improvises, and the improvisation
+ * is an accounting entry.
+ *
+ * Declared in `package.json` under `ekwo.schemaMin`, as a country pack
+ * declares it in its manifest, and repeated here as a constant so a bundle
+ * that never reads a manifest still carries it.
+ */
+import { type Backend } from './backend.js';
+/** The oldest schema this server speaks to. */
+export declare const SCHEMA_MIN = "0.4.0";
+/** The version the migrations of that database define. */
+export declare function installedSchemaVersion(backend: Backend): Promise<string | undefined>;
+/**
+ * Refuses a database older than this server, and says which way to fix it.
+ *
+ * A database that cannot answer at all is refused too: `ekwo_schema_version()`
+ * has existed since the first migration, so a silence means the schema is not
+ * installed rather than that it is old.
+ */
+export declare function assertSchemaSupported(backend: Backend): Promise<string>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAE1D,+CAA+C;AAC/C,eAAO,MAAM,UAAU,UAAU,CAAC;AAElC,0DAA0D;AAC1D,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU1F;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB7E"}

package/dist/schema.js

@@ -0,0 +1,51 @@
+/**
+ * What this server needs of the database it is pointed at.
+ *
+ * An MCP client is installed by whoever wants an assistant, and the database
+ * it reaches was installed by whoever runs the books — two decisions, two
+ * dates. So the server asks the schema its version before it answers anything,
+ * and refuses one it is too new for, by name. The alternative is what an
+ * assistant does with a missing column: it improvises, and the improvisation
+ * is an accounting entry.
+ *
+ * Declared in `package.json` under `ekwo.schemaMin`, as a country pack
+ * declares it in its manifest, and repeated here as a constant so a bundle
+ * that never reads a manifest still carries it.
+ */
+import { schemaIsAtLeast } from '@ekwo-ai/core';
+import { EkwoMcpError } from './backend.js';
+/** The oldest schema this server speaks to. */
+export const SCHEMA_MIN = '0.4.0';
+/** The version the migrations of that database define. */
+export async function installedSchemaVersion(backend) {
+    try {
+        const rows = await backend.rpc('ekwo_schema_version');
+        const version = rows[0];
+        return typeof version === 'string' ? version : undefined;
+    }
+    catch {
+        // A database that has no such function is not an Ekwo database at this
+        // version — which is exactly what the caller is about to say.
+        return undefined;
+    }
+}
+/**
+ * Refuses a database older than this server, and says which way to fix it.
+ *
+ * A database that cannot answer at all is refused too: `ekwo_schema_version()`
+ * has existed since the first migration, so a silence means the schema is not
+ * installed rather than that it is old.
+ */
+export async function assertSchemaSupported(backend) {
+    const installed = await installedSchemaVersion(backend);
+    if (installed === undefined) {
+        throw new EkwoMcpError(`schema_not_found: this database does not answer ekwo_schema_version(), so it does not carry the Ekwo schema. Run \`npx ekwo init\` against it first.`);
+    }
+    if (!schemaIsAtLeast(installed, SCHEMA_MIN)) {
+        throw new EkwoMcpError(`schema_too_old: this database is at ${installed} and @ekwo-ai/mcp needs ${SCHEMA_MIN} or newer. Run \`npx ekwo migrate\` against it, then start this server again.`, {
+            hint: 'Upgrading the database is the fix, never pinning this server: the schema moves forward only, and an older client would be reading rows that no longer mean what it thinks.',
+        });
+    }
+    return installed;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAgB,MAAM,cAAc,CAAC;AAE1D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC;AAElC,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgB;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAS,qBAAqB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,8DAA8D;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB;IAC1D,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,sJAAsJ,CACvJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CACpB,uCAAuC,SAAS,2BAA2B,UAAU,+EAA+E,EACpK;YACE,IAAI,EAAE,4KAA4K;SACnL,CACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The server itself: the tools, the resources and the two prompts.
+ *
+ * The descriptions here are written for a model rather than for a reference
+ * manual — when to reach for the tool, what comes back, and what it will not
+ * do. That last part is the one that earns its place: a model told that
+ * `post_document` cannot be undone asks before calling it, and a model told
+ * that a missing tax is not zero per cent stops inventing one.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type Backend } from './backend.js';
+export declare const SERVER_NAME = "@ekwo-ai/mcp";
+/**
+ * What this server tells a client it is, in the MCP handshake.
+ *
+ * Repeated here rather than read from `package.json`, for the reason
+ * `SCHEMA_MIN` is: a bundle that never ships a manifest still has to carry it.
+ * `tests/mcp/surface.test.ts` keeps the two equal, so a release that bumps one
+ * and forgets the other fails the build.
+ */
+export declare const SERVER_VERSION = "0.4.0";
+export interface ServerOptions {
+    /**
+     * The modules this installation carries, from `public.modules`. Their tools
+     * are registered under the module's own prefix — `assets_list`,
+     * `budgets_variance` — and a module that is not installed is not offered,
+     * because a tool a model cannot use is worse than a tool it cannot see.
+     * `bin.ts` asks the database; a test passes the list it wants.
+     */
+    modules?: readonly string[];
+}
+export declare function buildServer(backend: Backend, options?: ServerOptions): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAGtF,OAAO,EAAgB,KAAK,OAAO,EAAY,MAAM,cAAc,CAAC;AAMpE,eAAO,MAAM,WAAW,iBAAiB,CAAC;AAC1C;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,UAAU,CAAC;AA+BtC,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,aAAkB,GAAG,SAAS,CAozBpF"}