@itm-platform/mcp-server 1.0.2 → 1.0.3

package/dist/src/prompts/portfolio-overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolio-overview.d.ts","sourceRoot":"","sources":["../../../src/prompts/portfolio-overview.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,SAAS,QAuBhE"}

package/dist/src/prompts/portfolio-overview.js

@@ -0,0 +1,21 @@
+export function registerPortfolioOverviewPrompt(server) {
+    server.registerPrompt('portfolio_overview', {
+        description: 'Portfolio health overview. Aggregates projects by status and methodology, summarizes budget variance.',
+    }, async () => ({
+        messages: [{
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: `Generate a portfolio health overview. Use these tools:
+1. aggregate_portfolio with groupBy: "statusLabel", metrics: ["count", "avgProgress"] to see project distribution by status
+2. aggregate_portfolio with groupBy: "methodology", metrics: ["count", "totalBudget", "totalActual"] to see methodology breakdown with financials
+Then summarize:
+- Total projects and status distribution
+- Average progress by status
+- Budget health across the portfolio (planned vs actual)
+- Any concerning patterns (e.g., many projects behind schedule)`,
+                },
+            }],
+    }));
+}
+//# sourceMappingURL=portfolio-overview.js.map

package/dist/src/prompts/portfolio-overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolio-overview.js","sourceRoot":"","sources":["../../../src/prompts/portfolio-overview.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,+BAA+B,CAAC,MAAiB;IAC/D,MAAM,CAAC,cAAc,CACnB,oBAAoB,EACpB;QACE,WAAW,EAAE,uGAAuG;KACrH,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE;;;;;;;gEAOgD;iBACvD;aACF,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/prompts/project-status.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerProjectStatusPrompt(server: McpServer): void;
+//# sourceMappingURL=project-status.d.ts.map

package/dist/src/prompts/project-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-status.d.ts","sourceRoot":"","sources":["../../../src/prompts/project-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,QAyB5D"}

package/dist/src/prompts/project-status.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+export function registerProjectStatusPrompt(server) {
+    server.registerPrompt('project_status', {
+        description: 'Generate a status report for a project. Fetches the project with tasks, risks, issues, and budget in one call.',
+        argsSchema: {
+            projectId: z.string().describe('The project ID to report on'),
+        },
+    }, async (args) => ({
+        messages: [{
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: `Generate a comprehensive status report for project ${args.projectId}. Use the get_project tool with include: ["tasks", "risks", "issues", "budget"] to fetch all data in one call. Then summarize:
+1. Overall status and progress
+2. Key task status breakdown (not started / in progress / completed)
+3. Active risks and their mitigation status
+4. Open issues
+5. Budget health (planned vs actual)
+6. Key concerns or blockers`,
+                },
+            }],
+    }));
+}
+//# sourceMappingURL=project-status.js.map

package/dist/src/prompts/project-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-status.js","sourceRoot":"","sources":["../../../src/prompts/project-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,CAAC,cAAc,CACnB,gBAAgB,EAChB;QACE,WAAW,EAAE,gHAAgH;QAC7H,UAAU,EAAE;YACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;SAC9D;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sDAAsD,IAAI,CAAC,SAAS;;;;;;4BAMxD;iBACnB;aACF,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/prompts/risk-analysis.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerRiskAnalysisPrompt(server: McpServer): void;
+//# sourceMappingURL=risk-analysis.d.ts.map

package/dist/src/prompts/risk-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-analysis.d.ts","sourceRoot":"","sources":["../../../src/prompts/risk-analysis.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,QAwB3D"}

package/dist/src/prompts/risk-analysis.js

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+export function registerRiskAnalysisPrompt(server) {
+    server.registerPrompt('risk_analysis', {
+        description: 'Risk assessment for a project. Fetches risks, issues, and budget data to analyze risk exposure.',
+        argsSchema: {
+            projectId: z.string().describe('The project ID to analyze'),
+        },
+    }, async (args) => ({
+        messages: [{
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: `Perform a risk assessment for project ${args.projectId}. Use the get_project tool with include: ["risks", "issues", "budget"] to fetch all relevant data. Then analyze:
+1. Active risks: probability, impact, and mitigation status
+2. Open issues: severity and resolution progress
+3. Budget risk: variance between planned and actual
+4. Overall risk exposure rating (low/medium/high/critical)
+5. Recommended actions for the top risks`,
+                },
+            }],
+    }));
+}
+//# sourceMappingURL=risk-analysis.js.map

package/dist/src/prompts/risk-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-analysis.js","sourceRoot":"","sources":["../../../src/prompts/risk-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,MAAM,CAAC,cAAc,CACnB,eAAe,EACf;QACE,WAAW,EAAE,iGAAiG;QAC9G,UAAU,EAAE;YACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SAC5D;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,yCAAyC,IAAI,CAAC,SAAS;;;;;yCAK9B;iBAChC;aACF,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/prompts/team-workload.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerTeamWorkloadPrompt(server: McpServer): void;
+//# sourceMappingURL=team-workload.d.ts.map

package/dist/src/prompts/team-workload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workload.d.ts","sourceRoot":"","sources":["../../../src/prompts/team-workload.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,QA+B3D"}

package/dist/src/prompts/team-workload.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+export function registerTeamWorkloadPrompt(server) {
+    server.registerPrompt('team_workload', {
+        description: 'Team workload overview. Shows user assignments and project involvement.',
+        argsSchema: {
+            userId: z.string().optional().describe('Optional: specific user ID to focus on'),
+        },
+    }, async (args) => {
+        const userFilter = args.userId
+            ? ` Focus on user ${args.userId} -- use get_user to get their details first.`
+            : ' Get a broad view of the team.';
+        return {
+            messages: [{
+                    role: 'user',
+                    content: {
+                        type: 'text',
+                        text: `Generate a team workload overview.${userFilter} Use these tools:
+1. search_users to find team members
+2. search_projects to see active projects and their managers
+Then summarize:
+- Who is assigned to what
+- Which projects have the most team involvement
+- Any potential overload or underutilization patterns`,
+                    },
+                }],
+        };
+    });
+}
+//# sourceMappingURL=team-workload.js.map

package/dist/src/prompts/team-workload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workload.js","sourceRoot":"","sources":["../../../src/prompts/team-workload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,MAAM,CAAC,cAAc,CACnB,eAAe,EACf;QACE,WAAW,EAAE,yEAAyE;QACtF,UAAU,EAAE;YACV,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACjF;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;YAC5B,CAAC,CAAC,kBAAkB,IAAI,CAAC,MAAM,8CAA8C;YAC7E,CAAC,CAAC,gCAAgC,CAAC;QAErC,OAAO;YACL,QAAQ,EAAE,CAAC;oBACT,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qCAAqC,UAAU;;;;;;sDAMX;qBAC3C;iBACF,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/resources/calendars.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Clients } from '../clients/index.js';
+export declare function registerCalendarResources(server: McpServer, clients: Clients): void;
+//# sourceMappingURL=calendars.d.ts.map

package/dist/src/resources/calendars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendars.d.ts","sourceRoot":"","sources":["../../../src/resources/calendars.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AACtF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,QAoB5E"}

package/dist/src/resources/calendars.js

@@ -0,0 +1,18 @@
+import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
+export function registerCalendarResources(server, clients) {
+    server.registerResource('calendar', new ResourceTemplate('itm://calendars/{projectId}', { list: undefined }), {
+        description: 'Holiday calendar and work hours for a project',
+        mimeType: 'application/json',
+    }, async (_uri, variables) => {
+        const projectId = variables.projectId;
+        const data = await clients.rest.get(`holidays`);
+        return {
+            contents: [{
+                    uri: `itm://calendars/${projectId}`,
+                    mimeType: 'application/json',
+                    text: JSON.stringify(data, null, 2),
+                }],
+        };
+    });
+}
+//# sourceMappingURL=calendars.js.map

package/dist/src/resources/calendars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendars.js","sourceRoot":"","sources":["../../../src/resources/calendars.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAGtF,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,OAAgB;IAC3E,MAAM,CAAC,gBAAgB,CACrB,UAAU,EACV,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACxE;QACE,WAAW,EAAE,+CAA+C;QAC5D,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAmB,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO;YACL,QAAQ,EAAE,CAAC;oBACT,GAAG,EAAE,mBAAmB,SAAS,EAAE;oBACnC,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBACpC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/resources/schemas.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Clients } from '../clients/index.js';
+export declare function registerSchemaResources(server: McpServer, clients: Clients): void;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/src/resources/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/resources/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAoBnD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,QAsB1E"}

package/dist/src/resources/schemas.js

@@ -0,0 +1,34 @@
+const SCHEMA_ENTITIES = ['component', 'task', 'purchase', 'risk', 'issue'];
+const SCHEMA_URI_MAP = {
+    component: 'itm://schema/component',
+    task: 'itm://schema/tasks',
+    purchase: 'itm://schema/purchases',
+    risk: 'itm://schema/risks',
+    issue: 'itm://schema/issues',
+};
+const SCHEMA_DESCRIPTIONS = {
+    component: 'DataMart component schema (projects/services) -- available fields, types, and enums',
+    task: 'DataMart task schema -- fields available on task subcomponents',
+    purchase: 'DataMart purchase schema -- fields available on purchase subcomponents',
+    risk: 'DataMart risk schema -- fields available on risk subcomponents',
+    issue: 'DataMart issue schema -- fields available on issue subcomponents',
+};
+export function registerSchemaResources(server, clients) {
+    for (const entity of SCHEMA_ENTITIES) {
+        const uri = SCHEMA_URI_MAP[entity];
+        server.registerResource(`schema-${entity}`, uri, {
+            description: SCHEMA_DESCRIPTIONS[entity],
+            mimeType: 'application/json',
+        }, async () => {
+            const data = await clients.rest.get(`datamart/api/schema/${entity}`);
+            return {
+                contents: [{
+                        uri,
+                        mimeType: 'application/json',
+                        text: JSON.stringify(data, null, 2),
+                    }],
+            };
+        });
+    }
+}
+//# sourceMappingURL=schemas.js.map

package/dist/src/resources/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/resources/schemas.ts"],"names":[],"mappings":"AAGA,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAEpF,MAAM,cAAc,GAA2B;IAC7C,SAAS,EAAE,wBAAwB;IACnC,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,wBAAwB;IAClC,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,qBAAqB;CAC7B,CAAC;AAEF,MAAM,mBAAmB,GAA2B;IAClD,SAAS,EAAE,qFAAqF;IAChG,IAAI,EAAE,gEAAgE;IACtE,QAAQ,EAAE,wEAAwE;IAClF,IAAI,EAAE,gEAAgE;IACtE,KAAK,EAAE,kEAAkE;CAC1E,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,OAAgB;IACzE,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,gBAAgB,CACrB,UAAU,MAAM,EAAE,EAClB,GAAG,EACH;YACE,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC;YACxC,QAAQ,EAAE,kBAAkB;SAC7B,EACD,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG;wBACH,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;qBACpC,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/server.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/src/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":""}

package/dist/src/server.js

@@ -0,0 +1,213 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { createLogger } from './logger.js';
+import { resolveIdentity } from './auth/api-key-auth.js';
+import { createClients } from './clients/index.js';
+import { registerProjectTools } from './tools/projects.js';
+import { registerServiceTools } from './tools/services.js';
+import { registerTaskTools } from './tools/tasks.js';
+import { registerFinancialTools } from './tools/financials.js';
+import { registerRisksIssuesTools } from './tools/risks-issues.js';
+import { registerPortfolioTools } from './tools/portfolio.js';
+import { registerDataMartTool } from './tools/datamart.js';
+import { registerUserTools } from './tools/users.js';
+import { registerReferenceDataTools } from './tools/reference-data.js';
+import { registerWriteTools } from './tools/write-tools.js';
+import { registerSchemaResources } from './resources/schemas.js';
+import { registerCalendarResources } from './resources/calendars.js';
+import { registerProjectStatusPrompt } from './prompts/project-status.js';
+import { registerPortfolioOverviewPrompt } from './prompts/portfolio-overview.js';
+import { registerTeamWorkloadPrompt } from './prompts/team-workload.js';
+import { registerRiskAnalysisPrompt } from './prompts/risk-analysis.js';
+import { buildProtectedResourceMetadata } from './auth/oauth-metadata.js';
+import { extractBearerToken } from './auth/token-extraction.js';
+import { exchangeToken, buildEffectiveUserContextFromExchange } from './auth/oauth-auth.js';
+import { createAuditClient } from './clients/audit-client.js';
+import { hasScope } from './auth/effective-user-context.js';
+const log = createLogger('mcp');
+function createMcpServer(clients, writeCtx, userContext) {
+    const server = new McpServer({ name: 'itm-platform', version: '1.0.0' }, { capabilities: { tools: {}, resources: {}, prompts: {} } });
+    registerProjectTools(server, clients);
+    registerServiceTools(server, clients);
+    registerTaskTools(server, clients);
+    registerFinancialTools(server, clients);
+    registerRisksIssuesTools(server, clients);
+    registerPortfolioTools(server, clients);
+    registerDataMartTool(server, clients);
+    registerUserTools(server, clients);
+    registerReferenceDataTools(server, clients);
+    if (hasScope(userContext, 'mcp:write')) {
+        registerWriteTools(server, clients, writeCtx, undefined, userContext);
+    }
+    registerSchemaResources(server, clients);
+    registerCalendarResources(server, clients);
+    registerProjectStatusPrompt(server);
+    registerPortfolioOverviewPrompt(server);
+    registerTeamWorkloadPrompt(server);
+    registerRiskAnalysisPrompt(server);
+    return server;
+}
+function buildClientsForUser(userContext) {
+    const auditEnabled = process.env.ITM_AUDIT_ENABLED === 'true';
+    const audit = auditEnabled
+        ? createAuditClient({
+            apiUrl: process.env.ITM_API_URL,
+            company: userContext.company,
+            authHeaders: userContext.authHeaders,
+            log,
+        })
+        : undefined;
+    return createClients({
+        apiUrl: process.env.ITM_API_URL,
+        company: userContext.company,
+        authHeaders: userContext.authHeaders,
+        log,
+    }, audit);
+}
+function getOAuthConfig() {
+    const authUrl = process.env.ITM_AUTH_URL;
+    const audience = process.env.MCP_SERVER_URL;
+    if (!authUrl || !audience)
+        return undefined;
+    return {
+        tokenExchangeUrl: `${authUrl}/auth/exchange-token`,
+        audience,
+    };
+}
+async function main() {
+    log.info('ITM Platform MCP server starting...');
+    let userContext;
+    try {
+        userContext = await resolveIdentity();
+        log.info({ userId: userContext.userId, email: userContext.email, access: userContext.dataMartAccess }, 'Identity resolved');
+    }
+    catch (err) {
+        log.fatal({ err }, 'Failed to resolve identity');
+        process.exit(1);
+    }
+    const clients = buildClientsForUser(userContext);
+    const oauthConfig = getOAuthConfig();
+    const useHttp = process.env.PORT || process.argv.includes('--http');
+    if (useHttp) {
+        const port = parseInt(process.env.PORT ?? '6160', 10);
+        const sessions = new Map();
+        if (oauthConfig) {
+            log.info('OAuth configured -- per-session auth enabled');
+        }
+        else {
+            log.info('OAuth not configured -- using startup identity for all sessions');
+        }
+        const httpServer = createServer(async (req, res) => {
+            try {
+                if (req.method === 'GET' && req.url === '/.well-known/oauth-protected-resource') {
+                    const metadata = buildProtectedResourceMetadata({
+                        mcpServerUrl: process.env.MCP_SERVER_URL ?? `http://localhost:${port}`,
+                        authorizationServerUrl: process.env.ITM_AUTH_URL ?? '',
+                    });
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify(metadata));
+                    return;
+                }
+                if (req.method === 'POST' && req.url === '/mcp') {
+                    const body = await new Promise((resolve) => {
+                        let data = '';
+                        req.on('data', (chunk) => { data += chunk.toString(); });
+                        req.on('end', () => resolve(data));
+                    });
+                    const parsed = JSON.parse(body);
+                    const sessionId = req.headers['mcp-session-id'];
+                    let transport;
+                    if (sessionId && sessions.has(sessionId)) {
+                        transport = sessions.get(sessionId).transport;
+                    }
+                    else if (!sessionId && parsed.method === 'initialize') {
+                        let sessionClients = clients;
+                        let sessionUserContext = userContext;
+                        const aiClientId = parsed.params?.clientInfo?.name ?? 'unknown';
+                        if (oauthConfig) {
+                            const oauthToken = extractBearerToken(req.headers);
+                            if (oauthToken) {
+                                try {
+                                    const exchangeResult = await exchangeToken(oauthToken, oauthConfig, log);
+                                    sessionUserContext = buildEffectiveUserContextFromExchange(exchangeResult);
+                                    sessionClients = buildClientsForUser(sessionUserContext);
+                                    log.info({ userId: sessionUserContext.userId, email: sessionUserContext.email }, 'Per-session auth resolved');
+                                }
+                                catch (err) {
+                                    log.error({ err }, 'OAuth token exchange failed');
+                                    res.writeHead(401, { 'Content-Type': 'application/json' });
+                                    res.end(JSON.stringify({ error: 'Authentication failed' }));
+                                    return;
+                                }
+                            }
+                        }
+                        const writeCtx = {
+                            userId: sessionUserContext.userId,
+                            accountId: sessionUserContext.accountId,
+                            aiClientId,
+                        };
+                        const server = createMcpServer(sessionClients, writeCtx, sessionUserContext);
+                        transport = new StreamableHTTPServerTransport({
+                            sessionIdGenerator: () => randomUUID(),
+                            enableJsonResponse: true,
+                        });
+                        transport.onclose = () => {
+                            if (transport.sessionId)
+                                sessions.delete(transport.sessionId);
+                        };
+                        await server.connect(transport);
+                        await transport.handleRequest(req, res, parsed);
+                        if (transport.sessionId) {
+                            sessions.set(transport.sessionId, { server, transport });
+                            log.debug({ sessionId: transport.sessionId, aiClientId }, 'Session created');
+                        }
+                        return;
+                    }
+                    else {
+                        res.writeHead(400, { 'Content-Type': 'application/json' });
+                        res.end(JSON.stringify({ error: 'Missing or invalid session' }));
+                        return;
+                    }
+                    await transport.handleRequest(req, res, parsed);
+                }
+                else if (req.method === 'GET' && req.url === '/health') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ status: 'ok', user: userContext.email }));
+                }
+                else {
+                    res.writeHead(404);
+                    res.end();
+                }
+            }
+            catch (err) {
+                log.error({ err }, 'HTTP request error');
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Internal server error' }));
+                }
+            }
+        });
+        httpServer.listen(port, () => {
+            log.info({ port, transport: 'http' }, `MCP server listening on http://localhost:${port}/mcp`);
+        });
+    }
+    else {
+        const writeCtx = {
+            userId: userContext.userId,
+            accountId: userContext.accountId,
+            aiClientId: 'stdio',
+        };
+        const server = createMcpServer(clients, writeCtx, userContext);
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        log.info({ transport: 'stdio' }, 'MCP server connected via stdio');
+    }
+}
+main().catch((err) => {
+    log.fatal({ err }, 'Unhandled error');
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAgB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,qCAAqC,EAAoB,MAAM,sBAAsB,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAA6B,MAAM,kCAAkC,CAAC;AAEvF,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;AAQhC,SAAS,eAAe,CAAC,OAAgB,EAAE,QAA0B,EAAE,WAAiC;IACtG,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EAC1C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC5D,CAAC;IAEF,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACvC,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAED,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE3C,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACpC,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAiC;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC;IAC9D,MAAM,KAAK,GAAG,YAAY;QACxB,CAAC,CAAC,iBAAiB,CAAC;YAChB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAY;YAChC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,GAAG;SACJ,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,aAAa,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAY;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,GAAG;KACJ,EAAE,KAAK,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO;QACL,gBAAgB,EAAE,GAAG,OAAO,sBAAsB;QAClD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAEhD,IAAI,WAAiC,CAAC;IACtC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,cAAc,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC9H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2E,CAAC;QAEpG,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,IAAI,CAAC;gBACL,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,uCAAuC,EAAE,CAAC;oBAChF,MAAM,QAAQ,GAAG,8BAA8B,CAAC;wBAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,oBAAoB,IAAI,EAAE;wBACtE,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;qBACvD,CAAC,CAAC;oBACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAClC,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;oBAChD,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;wBACjD,IAAI,IAAI,GAAG,EAAE,CAAC;wBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;wBACjE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACrC,CAAC,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAEhC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;oBACtE,IAAI,SAAwC,CAAC;oBAE7C,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACzC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC;oBACjD,CAAC;yBAAM,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;wBACxD,IAAI,cAAc,GAAG,OAAO,CAAC;wBAC7B,IAAI,kBAAkB,GAAG,WAAW,CAAC;wBACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC;wBAEhE,IAAI,WAAW,EAAE,CAAC;4BAChB,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAA6C,CAAC,CAAC;4BACzF,IAAI,UAAU,EAAE,CAAC;gCACf,IAAI,CAAC;oCACH,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;oCACzE,kBAAkB,GAAG,qCAAqC,CAAC,cAAc,CAAC,CAAC;oCAC3E,cAAc,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;oCACzD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;gCAChH,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;oCAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oCAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;oCAC5D,OAAO;gCACT,CAAC;4BACH,CAAC;wBACH,CAAC;wBAED,MAAM,QAAQ,GAAqB;4BACjC,MAAM,EAAE,kBAAkB,CAAC,MAAM;4BACjC,SAAS,EAAE,kBAAkB,CAAC,SAAS;4BACvC,UAAU;yBACX,CAAC;wBAEF,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;wBAC7E,SAAS,GAAG,IAAI,6BAA6B,CAAC;4BAC5C,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;4BACtC,kBAAkB,EAAE,IAAI;yBACzB,CAAC,CAAC;wBACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;4BACvB,IAAI,SAAS,CAAC,SAAS;gCAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;wBAChE,CAAC,CAAC;wBACF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;wBAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;wBAChD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;4BACxB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;4BACzD,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;wBAC/E,CAAC;wBACD,OAAO;oBACT,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;wBACjE,OAAO;oBACT,CAAC;oBAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,4CAA4C,IAAI,MAAM,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAqB;YACjC,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,UAAU,EAAE,OAAO;SACpB,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/tools/datamart.d.ts

@@ -0,0 +1,17 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Clients } from '../clients/index.js';
+export declare function buildDataMartQueryBody(args: {
+    operation: string;
+    id?: number;
+    where?: Record<string, unknown>;
+    project?: Record<string, unknown>;
+    sort?: Record<string, unknown>;
+    limit?: number;
+    skip?: number;
+    pipeline?: Record<string, unknown>[];
+}): {
+    query: string;
+    variables: Record<string, unknown>;
+};
+export declare function registerDataMartTool(server: McpServer, clients: Clients): void;
+//# sourceMappingURL=datamart.d.ts.map

package/dist/src/tools/datamart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datamart.d.ts","sourceRoot":"","sources":["../../../src/tools/datamart.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAUnD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACtC;;;EAkBA;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,QA0CvE"}

package/dist/src/tools/datamart.js

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+import { COMPONENTS_QUERY, COMPONENT_QUERY, AGGREGATE_QUERY, MAX_LIST_LIMIT, clampLimit } from './graphql-queries.js';
+import { validateDataMartQuery } from '../validation/query-validator.js';
+const QUERY_MAP = {
+    component: COMPONENT_QUERY,
+    components: COMPONENTS_QUERY,
+    aggregateComponents: AGGREGATE_QUERY,
+};
+export function buildDataMartQueryBody(args) {
+    const query = QUERY_MAP[args.operation] ?? COMPONENTS_QUERY;
+    const variables = {};
+    if (args.operation === 'component') {
+        variables.id = args.id;
+        variables.proj = args.project;
+    }
+    else if (args.operation === 'aggregateComponents') {
+        variables.p = args.pipeline;
+    }
+    else {
+        if (args.where)
+            variables.w = args.where;
+        if (args.project)
+            variables.proj = args.project;
+        if (args.sort)
+            variables.sort = args.sort;
+        variables.limit = clampLimit(args.limit, MAX_LIST_LIMIT);
+        variables.skip = args.skip ?? 0;
+    }
+    return { query, variables };
+}
+export function registerDataMartTool(server, clients) {
+    server.registerTool('query_datamart', {
+        description: `Run a custom query against ITM DataMart (MongoDB-backed). For advanced analysis beyond typed tools.
+
+Operations:
+- "components": list with filters. Params: where, project, sort, limit (max 200), skip
+- "component": single by ID. Params: id, project
+- "aggregateComponents": aggregation pipeline. Params: pipeline (must end with $limit, max 1000)
+
+Allowed filter operators: $eq, $ne, $in, $nin, $gt, $gte, $lt, $lte, $regex, $options, $exists, $not, $and, $or, $nor
+Allowed pipeline stages: $match, $project, $group, $sort, $limit, $skip, $unwind, $addFields, $set, $unset
+Banned: $lookup, $merge, $out, $function, $accumulator, $where, $facet
+
+Key fields: id, name, code, componentType, statusLabel, priorityLabel, percentComplete, startDate, endDate, methodology, managers, tasks, risks, issues, purchases, revenues, budgetTopDown, budgetActual.`,
+        inputSchema: {
+            operation: z.enum(['component', 'components', 'aggregateComponents']).describe('The DataMart operation'),
+            id: z.number().optional().describe('Component ID (for "component" operation)'),
+            where: z.record(z.unknown()).optional().describe('MongoDB filter (for "components")'),
+            project: z.record(z.unknown()).optional().describe('Field projection (1 = include)'),
+            sort: z.record(z.unknown()).optional().describe('Sort spec (1 = ascending, -1 = descending)'),
+            limit: z.number().optional().describe('Max results (default 50, max 200 for list, 1000 for agg)'),
+            skip: z.number().optional().describe('Offset for pagination'),
+            pipeline: z.array(z.record(z.unknown())).optional().describe('Aggregation pipeline stages (must end with $limit)'),
+        },
+    }, async (args) => {
+        const body = buildDataMartQueryBody(args);
+        const validation = validateDataMartQuery({ query: body.query, variables: body.variables });
+        if (!validation.ok) {
+            return {
+                content: [{ type: 'text', text: `Validation error: ${validation.error?.message}` }],
+                isError: true,
+            };
+        }
+        const data = await clients.datamart.query(body);
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    });
+}
+//# sourceMappingURL=datamart.js.map

package/dist/src/tools/datamart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datamart.js","sourceRoot":"","sources":["../../../src/tools/datamart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,MAAM,SAAS,GAA2B;IACxC,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,gBAAgB;IAC5B,mBAAmB,EAAE,eAAe;CACrC,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,IAStC;IACC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC;IAC5D,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QACnC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,KAAK,qBAAqB,EAAE,CAAC;QACpD,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1C,SAAS,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,OAAgB;IACtE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EAAE;;;;;;;;;;;2MAWwL;QACrM,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACxG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAC9E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACrF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YACpF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAC7F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YACjG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC7D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;SACnH;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,qBAAqB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC5F,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvF,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/tools/financials.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Clients } from '../clients/index.js';
+export declare function registerFinancialTools(server: McpServer, clients: Clients): void;
+//# sourceMappingURL=financials.d.ts.map

package/dist/src/tools/financials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"financials.d.ts","sourceRoot":"","sources":["../../../src/tools/financials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,QA4DzE"}