@itm-platform/mcp-server 1.0.2 → 1.0.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ITM Platform
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -26,6 +26,8 @@ https://api.itmplatform.com/v2/_/mcp/
 
 OAuth is the recommended setup for most users because your AI client never sees your ITM Platform password or API key.
 
+After adding the server, open your AI client, type `/mcp` where slash commands are supported, select `itm-platform`, and complete the ITM Platform OAuth login when prompted.
+
 ### Local connection with an API key
 
 Use the npm package if you prefer to run the server locally, work behind a firewall, or need to connect to a self-hosted ITM Platform instance.
@@ -62,17 +64,27 @@ Example stdio configuration:
 
 To create an API key, log in to ITM Platform, open **My Profile**, and generate a key from the **API Key** section.
 
-## What You Can Ask
+After configuring the local server, restart your AI client and use `/mcp` or the client's MCP server list to confirm `itm-platform` is connected.
+
+## What Can an Agent Do?
+
+From simple lookups to fully automated cross-system workflows, MCP unlocks progressively more powerful use cases.
+
+**Quick lookup** -- Ask a question, get an answer:
 
-Once connected, your AI assistant can use ITM Platform data in normal conversation:
+> "What risks are open across my portfolio?"
 
-> "Which projects are behind schedule?"
+**Multi-step analysis** -- The agent chains multiple tools and synthesizes results:
 
-> "Give me a budget summary for the Digital Transformation program."
+> "Review every project ending this quarter. Flag any with budget overruns, open high-impact risks, or task completion below 60%."
 
-> "Create a high-priority task in Project Alpha due next Friday."
+**Automated bulk actions** -- The agent reads, decides, and writes across projects:
 
-> "What open risks exist across my portfolio?"
+> "For every project still in Planning status with a start date in the past, update the status to Execution and create a kick-off checklist task assigned to the project manager."
+
+**Scheduled intelligence** -- An agent runs on a schedule with no human prompt, pulling overdue tasks every Monday and posting a summary to Slack grouped by project manager.
+
+**Cross-system orchestration** -- Combine ITM Platform's MCP with other MCP servers (GitHub, Slack, Google Calendar, email). When a developer merges a PR, an agent finds the matching ITM Platform task, marks it complete, and if the project hits 100%, drafts a closure summary and emails the program manager.
 
 The MCP server authenticates as you, calls ITM Platform APIs, and returns only the data your ITM Platform account is allowed to access.
 
@@ -168,6 +180,8 @@ For any MCP-compatible client, the two connection values are:
 | Remote URL | `https://api.itmplatform.com/v2/_/mcp/` |
 | Local command | `npx @itm-platform/mcp-server` |
 
+After adding either connection, open the client's MCP command or server list. In clients that support slash commands, type `/mcp`, select `itm-platform`, and authenticate when prompted.
+
 ## Self-Hosting
 
 For a local stdio server, configure `ITM_API_URL`, `ITM_COMPANY`, and either `ITM_API_KEY` or `ITM_TOKEN`.
@@ -221,5 +235,5 @@ If a write succeeds but a later search shows old data, wait up to 60 seconds. Wr
 ## More Help
 
 - MCP docs: [modelcontextprotocol.io](https://modelcontextprotocol.io)
-- ITM Platform help: [help.itmplatform.com](https://help.itmplatform.com)
+- ITM Platform help: [helpcenter.itmplatform.com](https://helpcenter.itmplatform.com)
 - ITM Platform developer docs: [developers.itmplatform.com/documentation](https://developers.itmplatform.com/documentation)

package/dist/src/auth/api-key-auth.d.ts

@@ -0,0 +1,3 @@
+import { EffectiveUserContext } from './effective-user-context.js';
+export declare function resolveIdentity(): Promise<EffectiveUserContext>;
+//# sourceMappingURL=api-key-auth.d.ts.map

package/dist/src/auth/api-key-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.d.ts","sourceRoot":"","sources":["../../../src/auth/api-key-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AA0BnE,wBAAsB,eAAe,IAAI,OAAO,CAAC,oBAAoB,CAAC,CA6CrE"}

package/dist/src/auth/api-key-auth.js

@@ -0,0 +1,53 @@
+import { resolveLicenseAccess } from './license-resolver.js';
+function resolveAuthHeaders() {
+    const apiKey = process.env.ITM_API_KEY;
+    const token = process.env.ITM_TOKEN;
+    if (apiKey) {
+        return { source: 'api-key', headers: { 'Authorization': `Bearer ${apiKey}` } };
+    }
+    if (token) {
+        return { source: 'token', headers: { 'Token': token } };
+    }
+    throw new Error('Missing required environment variable: ITM_API_KEY or ITM_TOKEN');
+}
+export async function resolveIdentity() {
+    const apiUrl = process.env.ITM_API_URL;
+    const company = process.env.ITM_COMPANY;
+    if (!apiUrl)
+        throw new Error('Missing required environment variable: ITM_API_URL');
+    if (!company)
+        throw new Error('Missing required environment variable: ITM_COMPANY');
+    const { source, headers: authHeaders } = resolveAuthHeaders();
+    const url = `${apiUrl}/v2/${company}/resolve/identity`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            ...authHeaders,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Identity resolution failed: ${response.status} ${response.statusText}`);
+    }
+    const identity = await response.json();
+    const { dataMartAccess, pmScopeUserId } = resolveLicenseAccess(identity.licenseTypeIds, identity.userId);
+    if (dataMartAccess === 'pm-scoped') {
+        throw new Error('PM-only access is not yet available for MCP. It will arrive with hosted MCP (Phase 2) or gateway scope injection.');
+    }
+    if (dataMartAccess === 'none') {
+        throw new Error('Team Member access is not available for MCP.');
+    }
+    return {
+        source,
+        company,
+        accountId: identity.accountId,
+        userId: identity.userId,
+        languageId: identity.languageId,
+        email: identity.email,
+        licenseTypeIds: identity.licenseTypeIds,
+        dataMartAccess,
+        pmScopeUserId,
+        authHeaders,
+    };
+}
+//# sourceMappingURL=api-key-auth.js.map

package/dist/src/auth/api-key-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.js","sourceRoot":"","sources":["../../../src/auth/api-key-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAY7D,SAAS,kBAAkB;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAEpC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAEpF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAE9D,MAAM,GAAG,GAAG,GAAG,MAAM,OAAO,OAAO,mBAAmB,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,WAAW;YACd,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,QAAQ,GAAqB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzG,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;QACP,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,cAAc;QACd,aAAa;QACb,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/src/auth/effective-user-context.d.ts

@@ -0,0 +1,16 @@
+export interface EffectiveUserContext {
+    source: 'api-key' | 'token';
+    company: string;
+    accountId: number;
+    userId: number;
+    languageId: number;
+    email: string;
+    licenseTypeIds: number[];
+    dataMartAccess: 'full' | 'pm-scoped' | 'none';
+    pmScopeUserId?: number;
+    authHeaders: Record<string, string>;
+    grantedScopes?: string[];
+}
+export declare const WRITE_TOOL_NAMES: Set<string>;
+export declare function hasScope(ctx: EffectiveUserContext, scope: string): boolean;
+//# sourceMappingURL=effective-user-context.d.ts.map

package/dist/src/auth/effective-user-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective-user-context.d.ts","sourceRoot":"","sources":["../../../src/auth/effective-user-context.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,gBAAgB,aAE3B,CAAC;AAEH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAG1E"}

package/dist/src/auth/effective-user-context.js

@@ -0,0 +1,9 @@
+export const WRITE_TOOL_NAMES = new Set([
+    'create_task', 'update_task', 'create_risk', 'create_issue', 'update_project',
+]);
+export function hasScope(ctx, scope) {
+    if (!ctx.grantedScopes)
+        return true;
+    return ctx.grantedScopes.includes(scope);
+}
+//# sourceMappingURL=effective-user-context.js.map

package/dist/src/auth/effective-user-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective-user-context.js","sourceRoot":"","sources":["../../../src/auth/effective-user-context.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB;CAC9E,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,GAAyB,EAAE,KAAa;IAC/D,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/auth/license-resolver.d.ts

@@ -0,0 +1,6 @@
+export interface LicenseAccessResult {
+    dataMartAccess: 'full' | 'pm-scoped' | 'none';
+    pmScopeUserId?: number;
+}
+export declare function resolveLicenseAccess(licenseTypeIds: number[], userId: number): LicenseAccessResult;
+//# sourceMappingURL=license-resolver.d.ts.map

package/dist/src/auth/license-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-resolver.d.ts","sourceRoot":"","sources":["../../../src/auth/license-resolver.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAKD,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAQlG"}

package/dist/src/auth/license-resolver.js

@@ -0,0 +1,12 @@
+const FULL_ACCESS_TYPES = new Set([0, 1]);
+const PM_TYPE = 2;
+export function resolveLicenseAccess(licenseTypeIds, userId) {
+    if (licenseTypeIds.some(id => FULL_ACCESS_TYPES.has(id))) {
+        return { dataMartAccess: 'full' };
+    }
+    if (licenseTypeIds.includes(PM_TYPE)) {
+        return { dataMartAccess: 'pm-scoped', pmScopeUserId: userId };
+    }
+    return { dataMartAccess: 'none' };
+}
+//# sourceMappingURL=license-resolver.js.map

package/dist/src/auth/license-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-resolver.js","sourceRoot":"","sources":["../../../src/auth/license-resolver.ts"],"names":[],"mappings":"AAKA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,UAAU,oBAAoB,CAAC,cAAwB,EAAE,MAAc;IAC3E,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/src/auth/oauth-auth.d.ts

@@ -0,0 +1,22 @@
+import type { Logger } from 'pino';
+import type { EffectiveUserContext } from './effective-user-context.js';
+export interface TokenExchangeResult {
+    sessionToken: string;
+    userId: number;
+    accountId: number;
+    company: string;
+    email: string;
+    languageId: number;
+    licenseTypeIds: number[];
+    dataMartAccess: 'full' | 'pm-scoped' | 'none';
+    pmScopeUserId?: number;
+    expiresAt: string;
+    scope: string;
+}
+export interface OAuthConfig {
+    tokenExchangeUrl: string;
+    audience: string;
+}
+export declare function exchangeToken(oauthToken: string, config: OAuthConfig, log?: Logger): Promise<TokenExchangeResult>;
+export declare function buildEffectiveUserContextFromExchange(result: TokenExchangeResult): EffectiveUserContext;
+//# sourceMappingURL=oauth-auth.d.ts.map

package/dist/src/auth/oauth-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-auth.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAoB9B;AAED,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,CAcvG"}

package/dist/src/auth/oauth-auth.js

@@ -0,0 +1,34 @@
+export async function exchangeToken(oauthToken, config, log) {
+    log?.debug({ url: config.tokenExchangeUrl }, 'Token exchange request');
+    const response = await fetch(config.tokenExchangeUrl, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Authorization': `Bearer ${oauthToken}`,
+        },
+        body: JSON.stringify({ audience: config.audience }),
+    });
+    if (!response.ok) {
+        log?.error({ status: response.status }, 'Token exchange failed');
+        throw new Error(`Token exchange failed: ${response.status} ${response.statusText}`);
+    }
+    const result = await response.json();
+    log?.info({ userId: result.userId, company: result.company }, 'Token exchange succeeded');
+    return result;
+}
+export function buildEffectiveUserContextFromExchange(result) {
+    return {
+        source: 'token',
+        company: result.company,
+        accountId: result.accountId,
+        userId: result.userId,
+        languageId: result.languageId,
+        email: result.email,
+        licenseTypeIds: result.licenseTypeIds,
+        dataMartAccess: result.dataMartAccess,
+        pmScopeUserId: result.pmScopeUserId,
+        grantedScopes: result.scope.split(' ').filter(Boolean),
+        authHeaders: { 'Token': result.sessionToken },
+    };
+}
+//# sourceMappingURL=oauth-auth.js.map

package/dist/src/auth/oauth-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-auth.js","sourceRoot":"","sources":["../../../src/auth/oauth-auth.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,MAAmB,EACnB,GAAY;IAEZ,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,UAAU,EAAE;SACxC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACpD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;IAC5D,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,MAA2B;IAC/E,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACtD,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE;KAC9C,CAAC;AACJ,CAAC"}

package/dist/src/auth/oauth-metadata.d.ts

@@ -0,0 +1,10 @@
+export interface ProtectedResourceMetadata {
+    resource: string;
+    authorization_servers: string[];
+    scopes_supported: string[];
+}
+export declare function buildProtectedResourceMetadata(config: {
+    mcpServerUrl: string;
+    authorizationServerUrl: string;
+}): ProtectedResourceMetadata;
+//# sourceMappingURL=oauth-metadata.d.ts.map

package/dist/src/auth/oauth-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth-metadata.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;CAChC,GAAG,yBAAyB,CAM5B"}

package/dist/src/auth/oauth-metadata.js

@@ -0,0 +1,8 @@
+export function buildProtectedResourceMetadata(config) {
+    return {
+        resource: config.mcpServerUrl,
+        authorization_servers: [config.authorizationServerUrl],
+        scopes_supported: ['mcp:read', 'mcp:write'],
+    };
+}
+//# sourceMappingURL=oauth-metadata.js.map

package/dist/src/auth/oauth-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.js","sourceRoot":"","sources":["../../../src/auth/oauth-metadata.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,8BAA8B,CAAC,MAG9C;IACC,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,YAAY;QAC7B,qBAAqB,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC;QACtD,gBAAgB,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/src/auth/token-extraction.d.ts

@@ -0,0 +1,2 @@
+export declare function extractBearerToken(headers: Record<string, string | undefined>): string | undefined;
+//# sourceMappingURL=token-extraction.d.ts.map

package/dist/src/auth/token-extraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-extraction.d.ts","sourceRoot":"","sources":["../../../src/auth/token-extraction.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAIlG"}

package/dist/src/auth/token-extraction.js

@@ -0,0 +1,7 @@
+export function extractBearerToken(headers) {
+    const auth = headers.authorization;
+    if (auth?.startsWith('Bearer '))
+        return auth.slice(7);
+    return undefined;
+}
+//# sourceMappingURL=token-extraction.js.map

package/dist/src/auth/token-extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-extraction.js","sourceRoot":"","sources":["../../../src/auth/token-extraction.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,kBAAkB,CAAC,OAA2C;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IACnC,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/clients/audit-client.d.ts

@@ -0,0 +1,25 @@
+import type { Logger } from 'pino';
+export interface AuditClientConfig {
+    apiUrl: string;
+    company: string;
+    authHeaders: Record<string, string>;
+    log?: Logger;
+}
+export interface AuditEntry {
+    timestamp: string;
+    userId: number;
+    accountId: number;
+    toolName: string;
+    parametersHash: string;
+    success: boolean;
+    error?: string;
+    aiClientId: string;
+    durationMs: number;
+}
+export interface AuditClient {
+    log(entry: AuditEntry): Promise<void>;
+}
+export declare function hashParameters(params: unknown): string;
+export declare function createAuditClient(config: AuditClientConfig): AuditClient;
+export declare function createNoOpAuditClient(): AuditClient;
+//# sourceMappingURL=audit-client.d.ts.map

package/dist/src/clients/audit-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-client.d.ts","sourceRoot":"","sources":["../../../src/clients/audit-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA0BxE;AAED,wBAAgB,qBAAqB,IAAI,WAAW,CAInD"}

package/dist/src/clients/audit-client.js

@@ -0,0 +1,37 @@
+import { createHash } from 'node:crypto';
+export function hashParameters(params) {
+    return createHash('sha256').update(JSON.stringify(params)).digest('hex');
+}
+export function createAuditClient(config) {
+    const url = `${config.apiUrl}/v2/${config.company}/mcp/audit`;
+    const headers = {
+        ...config.authHeaders,
+        'Content-Type': 'application/json',
+    };
+    const log = config.log;
+    return {
+        async log(entry) {
+            try {
+                const response = await fetch(url, {
+                    method: 'POST',
+                    headers,
+                    body: JSON.stringify(entry),
+                });
+                if (!response.ok) {
+                    log?.warn({ status: response.status, toolName: entry.toolName }, 'Audit POST failed');
+                    return;
+                }
+                log?.debug({ toolName: entry.toolName }, 'Audit entry logged');
+            }
+            catch (err) {
+                log?.warn({ err, toolName: entry.toolName }, 'Audit POST error');
+            }
+        },
+    };
+}
+export function createNoOpAuditClient() {
+    return {
+        async log() { },
+    };
+}
+//# sourceMappingURL=audit-client.js.map

package/dist/src/clients/audit-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-client.js","sourceRoot":"","sources":["../../../src/clients/audit-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BzC,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,OAAO,YAAY,CAAC;IAC9D,MAAM,OAAO,GAA2B;QACtC,GAAG,MAAM,CAAC,WAAW;QACrB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAiB;YACzB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,mBAAmB,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,KAAK,CAAC,GAAG,KAAmB,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/src/clients/datamart-client.d.ts

@@ -0,0 +1,16 @@
+import type { Logger } from 'pino';
+export interface DataMartClientConfig {
+    apiUrl: string;
+    company: string;
+    authHeaders: Record<string, string>;
+    log?: Logger;
+}
+export interface DataMartQuery {
+    query: string;
+    variables: Record<string, unknown>;
+}
+export interface DataMartClient {
+    query(body: DataMartQuery): Promise<Record<string, unknown>>;
+}
+export declare function createDataMartClient(config: DataMartClientConfig): DataMartClient;
+//# sourceMappingURL=datamart-client.d.ts.map

package/dist/src/clients/datamart-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datamart-client.d.ts","sourceRoot":"","sources":["../../../src/clients/datamart-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9D;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAmCjF"}

package/dist/src/clients/datamart-client.js

@@ -0,0 +1,32 @@
+import { randomUUID } from 'node:crypto';
+export function createDataMartClient(config) {
+    const baseUrl = `${config.apiUrl}/v2/${config.company}/datamart/graphql`;
+    const log = config.log;
+    return {
+        async query(body) {
+            const requestId = randomUUID();
+            const start = Date.now();
+            const response = await fetch(baseUrl, {
+                method: 'POST',
+                headers: {
+                    ...config.authHeaders,
+                    'Content-Type': 'application/json',
+                    'X-Request-Id': requestId,
+                },
+                body: JSON.stringify(body),
+            });
+            if (!response.ok) {
+                log?.error({ requestId, status: response.status, ms: Date.now() - start }, 'DataMart request failed');
+                throw new Error(`DataMart request failed: ${response.status} ${response.statusText}`);
+            }
+            const json = await response.json();
+            if (json.errors?.length) {
+                log?.error({ requestId, graphqlError: json.errors[0].message, ms: Date.now() - start }, 'DataMart GraphQL error');
+                throw new Error(`DataMart GraphQL error: ${json.errors[0].message}`);
+            }
+            log?.debug({ requestId, ms: Date.now() - start }, 'DataMart request OK');
+            return json.data ?? {};
+        },
+    };
+}
+//# sourceMappingURL=datamart-client.js.map

package/dist/src/clients/datamart-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datamart-client.js","sourceRoot":"","sources":["../../../src/clients/datamart-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,OAAO,mBAAmB,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,IAAmB;YAC7B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,MAAM,CAAC,WAAW;oBACrB,cAAc,EAAE,kBAAkB;oBAClC,cAAc,EAAE,SAAS;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACtG,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6E,CAAC;YAE9G,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACxB,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBAClH,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/clients/index.d.ts

@@ -0,0 +1,18 @@
+import type { Logger } from 'pino';
+import { type DataMartClient } from './datamart-client.js';
+import { type RestClient } from './rest-client.js';
+import { type AuditClient } from './audit-client.js';
+export interface ClientConfig {
+    apiUrl: string;
+    company: string;
+    authHeaders: Record<string, string>;
+    log?: Logger;
+}
+export interface Clients {
+    datamart: DataMartClient;
+    rest: RestClient;
+    audit: AuditClient;
+}
+export declare function createClients(config: ClientConfig, audit?: AuditClient): Clients;
+export type { DataMartClient, RestClient, AuditClient };
+//# sourceMappingURL=index.d.ts.map

package/dist/src/clients/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/clients/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAMhF;AAED,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC"}

package/dist/src/clients/index.js

@@ -0,0 +1,11 @@
+import { createDataMartClient } from './datamart-client.js';
+import { createRestClient } from './rest-client.js';
+import { createNoOpAuditClient } from './audit-client.js';
+export function createClients(config, audit) {
+    return {
+        datamart: createDataMartClient(config),
+        rest: createRestClient(config),
+        audit: audit ?? createNoOpAuditClient(),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/src/clients/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/clients/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAoB,MAAM,mBAAmB,CAAC;AAe5E,MAAM,UAAU,aAAa,CAAC,MAAoB,EAAE,KAAmB;IACrE,OAAO;QACL,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACtC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC9B,KAAK,EAAE,KAAK,IAAI,qBAAqB,EAAE;KACxC,CAAC;AACJ,CAAC"}

package/dist/src/clients/rest-client.d.ts

@@ -0,0 +1,14 @@
+import type { Logger } from 'pino';
+export interface RestClientConfig {
+    apiUrl: string;
+    company: string;
+    authHeaders: Record<string, string>;
+    log?: Logger;
+}
+export interface RestClient {
+    get(path: string): Promise<unknown>;
+    post(path: string, body: unknown): Promise<unknown>;
+    patch(path: string, body: unknown): Promise<unknown>;
+}
+export declare function createRestClient(config: RestClientConfig): RestClient;
+//# sourceMappingURL=rest-client.d.ts.map

package/dist/src/clients/rest-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-client.d.ts","sourceRoot":"","sources":["../../../src/clients/rest-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAgCrE"}

package/dist/src/clients/rest-client.js

@@ -0,0 +1,29 @@
+export function createRestClient(config) {
+    const baseUrl = `${config.apiUrl}/v2/${config.company}`;
+    const headers = {
+        ...config.authHeaders,
+        'Content-Type': 'application/json',
+    };
+    const log = config.log;
+    async function request(method, path, body) {
+        const start = Date.now();
+        const response = await fetch(`${baseUrl}/${path}`, {
+            method,
+            headers,
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        if (!response.ok) {
+            log?.error({ method, path, status: response.status, ms: Date.now() - start }, 'REST request failed');
+            throw new Error(`REST request failed: ${response.status} ${response.statusText}`);
+        }
+        const result = await response.json();
+        log?.debug({ method, path, ms: Date.now() - start }, 'REST request OK');
+        return result;
+    }
+    return {
+        get: (path) => request('GET', path),
+        post: (path, body) => request('POST', path, body),
+        patch: (path, body) => request('PATCH', path, body),
+    };
+}
+//# sourceMappingURL=rest-client.js.map

package/dist/src/clients/rest-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-client.js","sourceRoot":"","sources":["../../../src/clients/rest-client.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,OAAO,GAA2B;QACtC,GAAG,MAAM,CAAC,WAAW;QACrB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAEvB,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,EAAE;YACjD,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACrG,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QAClE,KAAK,EAAE,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/src/logger.d.ts

@@ -0,0 +1,3 @@
+import { type Logger } from 'pino';
+export declare function createLogger(service: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAOzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiCpD"}

package/dist/src/logger.js

@@ -0,0 +1,37 @@
+import pino from 'pino';
+import { mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+const LOG_DIR = join(process.cwd(), 'logs');
+const LOG_FILE = join(LOG_DIR, 'mcp.log');
+export function createLogger(service) {
+    const level = process.env.LOG_LEVEL || 'info';
+    const isTest = process.env.NODE_ENV === 'test';
+    const targets = [
+        {
+            target: 'pino-pretty',
+            options: {
+                singleLine: true,
+                translateTime: 'HH:MM:ss.l',
+                ignore: 'pid,hostname',
+                colorize: true,
+                destination: 2,
+            },
+            level,
+        },
+    ];
+    if (!isTest) {
+        mkdirSync(LOG_DIR, { recursive: true });
+        targets.push({
+            target: 'pino-roll',
+            options: { file: LOG_FILE, size: '10m', limit: { count: 5 } },
+            level,
+        });
+    }
+    return pino({
+        level,
+        base: { service, app: 'ITM.MCP' },
+        timestamp: pino.stdTimeFunctions.isoTime,
+        transport: { targets },
+    });
+}
+//# sourceMappingURL=logger.js.map

package/dist/src/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAqB,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAE1C,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;IAE/C,MAAM,OAAO,GAAkC;QAC7C;YACE,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC;aACf;YACD,KAAK;SACN;KACF,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7D,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;QACV,KAAK;QACL,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE;QACjC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,SAAS,EAAE,EAAE,OAAO,EAAE;KACvB,CAAC,CAAC;AACL,CAAC"}

package/dist/src/prompts/portfolio-overview.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerPortfolioOverviewPrompt(server: McpServer): void;
+//# sourceMappingURL=portfolio-overview.d.ts.map