@mongrov/analytics 0.1.0-alpha.10 → 0.1.0-alpha.8

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Mongrov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -451,22 +451,6 @@ Fixture exports used across mapper + firmware tests live at
 Consumers writing their own regression tests can import them via a relative
 path inside this workspace; they are excluded from the published `dist/`.
 
-## AI tools (`@mongrov/analytics/tools`)
-
-Six read-only AI SDK v4 tools (`getHRV`, `getSleepSummary`,
-`getActivityTotal`, `compareTrend`, `detectAnomaly`, `getInsights`)
-sit on top of the warehouse, wired through a
-`rate → auth → execute → budget → audit` chain. See
-[`src/tools/README.md`](./src/tools/README.md).
-
-### MCP dev server (`@mongrov/analytics/tools/mcp`)
-
-Same six tools, exposed over Model Context Protocol via stdio
-(Claude Desktop) or HTTP with bearer auth (MCP Inspector, curl).
-Dev-guarded (`shouldStartMcpServer()`) + `sideEffects: false` so
-prod RN bundles drop the SDK. See
-[`src/tools/mcp/README.md`](./src/tools/mcp/README.md).
-
 ## License
 
 MIT

package/dist/tools/index.d.ts

@@ -1,14 +1,2 @@
-export * from './audit';
-export * from './authorize';
-export * from './budget';
-export * from './factory';
-export * from './rate-limit';
-export * from './types';
-export * from './wrap';
-export { getHRV, getHRVInputSchema, type GetHRVInput, } from './impls/hrv';
-export { getSleepSummary, getSleepSummaryInputSchema, type GetSleepSummaryInput, } from './impls/sleep';
-export { getActivityTotal, getActivityTotalInputSchema, type GetActivityTotalInput, } from './impls/activity';
-export { compareTrend, compareTrendInputSchema, type CompareTrendInput, } from './impls/compare';
-export { detectAnomaly, detectAnomalyInputSchema, type DetectAnomalyInput, } from './impls/anomaly';
-export { getInsights, getInsightsInputSchema, type GetInsightsInput, } from './impls/insights';
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AASA,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA;AAEtB,OAAO,EACL,MAAM,EACN,iBAAiB,EACjB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAA"}

package/dist/tools/index.js

@@ -1,22 +1,2 @@
-// @mongrov/analytics/tools — typed AI SDK tools + MCP.
-//
-// v0.1.0-alpha (T-01..T-12 landed): tool impls, formatters, rate
-// limiter, authorize hooks (with optional familyMembersProvider),
-// batched `tool_call_audit` writer, output-budget helper, `makeTool`
-// wrapper composing rate → auth → execute → budget → audit, and the
-// `createAnalyticsTools` factory returning an AI SDK tool map.
-// MCP subpath (T-13/T-14) still pending.
-export * from './audit';
-export * from './authorize';
-export * from './budget';
-export * from './factory';
-export * from './rate-limit';
-export * from './types';
-export * from './wrap';
-export { getHRV, getHRVInputSchema, } from './impls/hrv';
-export { getSleepSummary, getSleepSummaryInputSchema, } from './impls/sleep';
-export { getActivityTotal, getActivityTotalInputSchema, } from './impls/activity';
-export { compareTrend, compareTrendInputSchema, } from './impls/compare';
-export { detectAnomaly, detectAnomalyInputSchema, } from './impls/anomaly';
-export { getInsights, getInsightsInputSchema, } from './impls/insights';
+export {};
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,qEAAqE;AACrE,oEAAoE;AACpE,+DAA+D;AAC/D,yCAAyC;AAEzC,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA;AAEtB,OAAO,EACL,MAAM,EACN,iBAAiB,GAElB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,eAAe,EACf,0BAA0B,GAE3B,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,GAE5B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,YAAY,EACZ,uBAAuB,GAExB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,aAAa,EACb,wBAAwB,GAEzB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,WAAW,EACX,sBAAsB,GAEvB,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@mongrov/analytics",
-  "version": "0.1.0-alpha.10",
-  "sideEffects": false,
+  "version": "0.1.0-alpha.8",
   "description": "DuckDB + R2 Iceberg local analytics for @mongrov apps",
   "license": "MIT",
   "repository": {
@@ -39,11 +38,6 @@
       "import": "./dist/tools/index.js",
       "default": "./dist/tools/index.js"
     },
-    "./tools/mcp": {
-      "types": "./dist/tools/mcp/index.d.ts",
-      "import": "./dist/tools/mcp/index.js",
-      "default": "./dist/tools/mcp/index.js"
-    },
     "./sync": {
       "types": "./dist/sync/index.d.ts",
       "import": "./dist/sync/index.js",
@@ -58,28 +52,14 @@
   "files": [
     "dist"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.build.json",
-    "clean": "rm -rf dist",
-    "prebuild": "pnpm run clean",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc --noEmit",
-    "prepublishOnly": "pnpm run build"
-  },
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": ">=1.20.0",
-    "@mongrov/db": "workspace:*",
     "@mongrov/types": "^0.4.0",
-    "ai": ">=4",
     "react": ">=19",
     "react-native": ">=0.81",
-    "react-native-duckdb": ">=1.0.0"
+    "react-native-duckdb": ">=1.0.0",
+    "@mongrov/db": "0.3.0"
   },
   "peerDependenciesMeta": {
-    "@modelcontextprotocol/sdk": {
-      "optional": true
-    },
     "react": {
       "optional": true
     },
@@ -94,23 +74,28 @@
     "@iarna/toml": "^2.2.5",
     "date-fns-tz": "^3.2.0",
     "p-queue": "^8.0.1",
-    "xstate": "^5.30.0",
-    "zod-to-json-schema": "^3.25.2"
+    "xstate": "^5.30.0"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@mongrov/db": "workspace:*",
-    "@mongrov/types": "workspace:*",
     "@testing-library/react": "^14.3.1",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
-    "ai": "^4.3.0",
     "fast-check": "^4.9.0",
     "jsdom": "^25.0.1",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "typescript": "^5.9.3",
     "vitest": "^2.1.9",
-    "zod": "^3.23.8"
+    "zod": "^3.23.8",
+    "@mongrov/db": "0.3.0",
+    "@mongrov/types": "0.4.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "clean": "rm -rf dist",
+    "prebuild": "pnpm run clean",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
   }
-}
+}

package/dist/tools/__fakes__/engine.d.ts

@@ -1,25 +0,0 @@
-import type { AnalyticsEngine } from '../../core/types';
-/**
- * Scriptable AnalyticsEngine fake for tool tests.
- *
- * Unlike the rules-side fake (single global queue), this fake supports
- * per-SQL-substring row queues so multi-query tools (compare, activity)
- * can script distinct responses per call.
- *
- * Usage:
- *   const engine = createFakeEngine()
- *   engine.queueRows('FROM hrv', [{ day: '2026-07-08', avg_hrv: 45 }])
- *   engine.queueRows('FROM sleep_session', [...])
- *   // ...invoke tool...
- *   engine.calls.forEach(c => ...)
- */
-export interface FakeEngine extends AnalyticsEngine {
-    readonly calls: {
-        sql: string;
-        params: Record<string, unknown>;
-    }[];
-    queueRows: (sqlSubstring: string, rows: unknown[]) => void;
-    setError: (err: Error | null) => void;
-}
-export declare function createFakeEngine(): FakeEngine;
-//# sourceMappingURL=engine.d.ts.map

package/dist/tools/__fakes__/engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/tools/__fakes__/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,QAAQ,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAA;IAClE,SAAS,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IAC1D,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,CAAA;CACtC;AAED,wBAAgB,gBAAgB,IAAI,UAAU,CAkC7C"}

package/dist/tools/__fakes__/engine.js

@@ -1,37 +0,0 @@
-export function createFakeEngine() {
-    const queues = [];
-    const calls = [];
-    let error = null;
-    const engine = {
-        async attach() { },
-        async detach() { },
-        async execute(sql, params) {
-            calls.push({ sql, params: params ?? {} });
-            if (error)
-                throw error;
-            const idx = queues.findIndex(q => sql.includes(q.substring));
-            if (idx === -1)
-                return [];
-            const [q] = queues.splice(idx, 1);
-            return q.rows;
-        },
-        stream() {
-            throw new Error('stream not implemented in fake');
-        },
-        createAppender() {
-            throw new Error('createAppender not implemented in fake');
-        },
-        state: 'attached',
-        lastError: null,
-        catalog: 'fake',
-        subscribe: () => () => { },
-        async setRetention() { },
-        async getLastAttach() { return null; },
-        async close() { },
-        calls,
-        queueRows(substring, rows) { queues.push({ substring, rows }); },
-        setError(err) { error = err; },
-    };
-    return engine;
-}
-//# sourceMappingURL=engine.js.map

package/dist/tools/__fakes__/engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/tools/__fakes__/engine.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAA6C,EAAE,CAAA;IAC3D,MAAM,KAAK,GAAuD,EAAE,CAAA;IACpE,IAAI,KAAK,GAAiB,IAAI,CAAA;IAE9B,MAAM,MAAM,GAAe;QACzB,KAAK,CAAC,MAAM,KAAI,CAAC;QACjB,KAAK,CAAC,MAAM,KAAI,CAAC;QACjB,KAAK,CAAC,OAAO,CAAI,GAAW,EAAE,MAAgC;YAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAA;YACzC,IAAI,KAAK;gBAAE,MAAM,KAAK,CAAA;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YAC5D,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAS,CAAA;YAChC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACjC,OAAO,CAAC,CAAC,IAAW,CAAA;QACtB,CAAC;QACD,MAAM;YACJ,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACnD,CAAC;QACD,cAAc;YACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC3D,CAAC;QACD,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC;QACzB,KAAK,CAAC,YAAY,KAAI,CAAC;QACvB,KAAK,CAAC,aAAa,KAAK,OAAO,IAAI,CAAA,CAAC,CAAC;QACrC,KAAK,CAAC,KAAK,KAAI,CAAC;QAChB,KAAK;QACL,SAAS,CAAC,SAAS,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;QAC/D,QAAQ,CAAC,GAAG,IAAI,KAAK,GAAG,GAAG,CAAA,CAAC,CAAC;KAC9B,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/tools/audit.d.ts

@@ -1,31 +0,0 @@
-/**
- * Batched writer for `tool_call_audit`.
- *
- * `record()` enqueues synchronously (non-blocking). The batch flushes
- * whenever:
- *   - the pending queue reaches `batchSize` (default 10), or
- *   - the flush timer fires (`flushIntervalMs`, default 1000ms).
- *
- * `flush()` and `close()` are cooperative exit hooks — `close`
- * additionally halts the timer.
- *
- * On flush failure the batch is retained and retried on the next
- * tick. A defensive `MAX_CONSECUTIVE_FAILURES` cap drops the buffer
- * after repeated errors to avoid unbounded growth on a stuck
- * warehouse.
- *
- * SQL uses a single INSERT with a suffix-indexed VALUES tuple per
- * row (`$p0_ts, $p0_brand, …, $p1_ts, …`). DuckDB honors named
- * parameters in this form.
- */
-import type { AnalyticsEngine } from '../core/types';
-import type { AuditWriter, ToolsLogger } from './types';
-export interface CreateAuditWriterConfig {
-    analytics: AnalyticsEngine;
-    enabled?: boolean;
-    batchSize?: number;
-    flushIntervalMs?: number;
-    logger?: ToolsLogger;
-}
-export declare function createAuditWriter(cfg: CreateAuditWriterConfig): AuditWriter;
-//# sourceMappingURL=audit.d.ts.map

package/dist/tools/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/tools/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAc,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAoBnE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,eAAe,CAAA;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,uBAAuB,GAAG,WAAW,CA6F3E"}

package/dist/tools/audit.js

@@ -1,157 +0,0 @@
-/**
- * Batched writer for `tool_call_audit`.
- *
- * `record()` enqueues synchronously (non-blocking). The batch flushes
- * whenever:
- *   - the pending queue reaches `batchSize` (default 10), or
- *   - the flush timer fires (`flushIntervalMs`, default 1000ms).
- *
- * `flush()` and `close()` are cooperative exit hooks — `close`
- * additionally halts the timer.
- *
- * On flush failure the batch is retained and retried on the next
- * tick. A defensive `MAX_CONSECUTIVE_FAILURES` cap drops the buffer
- * after repeated errors to avoid unbounded growth on a stuck
- * warehouse.
- *
- * SQL uses a single INSERT with a suffix-indexed VALUES tuple per
- * row (`$p0_ts, $p0_brand, …, $p1_ts, …`). DuckDB honors named
- * parameters in this form.
- */
-const DEFAULT_BATCH_SIZE = 10;
-const DEFAULT_FLUSH_INTERVAL_MS = 1000;
-const MAX_CONSECUTIVE_FAILURES = 5;
-const COLUMNS = [
-    'ts',
-    'brand',
-    'family_id',
-    'requester_user_id',
-    'tool_name',
-    'args',
-    'result_bytes',
-    'result_row_count',
-    'latency_ms',
-    'outcome',
-    'error_message',
-];
-export function createAuditWriter(cfg) {
-    const enabled = cfg.enabled ?? true;
-    const batchSize = cfg.batchSize ?? DEFAULT_BATCH_SIZE;
-    const flushIntervalMs = cfg.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;
-    const logger = cfg.logger;
-    const pending = [];
-    let timer = null;
-    let consecutiveFailures = 0;
-    let inFlight = null;
-    let closed = false;
-    function ensureTimer() {
-        if (timer || closed)
-            return;
-        timer = setInterval(() => {
-            void doFlush();
-        }, flushIntervalMs);
-        // Node timers are keep-alive by default; unref so a lingering
-        // audit writer doesn't block process exit.
-        if (typeof timer.unref === 'function') {
-            timer.unref();
-        }
-    }
-    function clearFlushTimer() {
-        if (!timer)
-            return;
-        clearInterval(timer);
-        timer = null;
-    }
-    async function doFlush() {
-        if (inFlight)
-            return inFlight;
-        if (pending.length === 0)
-            return;
-        const batch = pending.splice(0, pending.length);
-        inFlight = (async () => {
-            try {
-                await writeBatch(cfg.analytics, batch);
-                consecutiveFailures = 0;
-            }
-            catch (err) {
-                consecutiveFailures += 1;
-                const errMsg = err instanceof Error ? err.message : String(err);
-                logger?.warn('audit flush failed', {
-                    err: errMsg,
-                    batchSize: batch.length,
-                    consecutiveFailures,
-                });
-                if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                    logger?.error('audit flush cap reached, dropping batch', {
-                        droppedRows: batch.length,
-                    });
-                    consecutiveFailures = 0;
-                }
-                else {
-                    // Retain: prepend so retry preserves order.
-                    pending.unshift(...batch);
-                }
-            }
-            finally {
-                inFlight = null;
-            }
-        })();
-        return inFlight;
-    }
-    return {
-        record(entry) {
-            if (!enabled || closed)
-                return;
-            pending.push(entry);
-            ensureTimer();
-            if (pending.length >= batchSize) {
-                void doFlush();
-            }
-        },
-        async flush() {
-            if (!enabled)
-                return;
-            await doFlush();
-            // If the flush swallowed a failure and re-queued, drain once
-            // more so callers get a best-effort guarantee.
-            if (pending.length > 0) {
-                await doFlush();
-            }
-        },
-        async close() {
-            closed = true;
-            clearFlushTimer();
-            if (!enabled)
-                return;
-            await doFlush();
-            if (pending.length > 0) {
-                await doFlush();
-            }
-        },
-    };
-}
-async function writeBatch(analytics, batch) {
-    if (batch.length === 0)
-        return;
-    const tuples = [];
-    const params = {};
-    batch.forEach((entry, i) => {
-        const prefix = `p${i}`;
-        const placeholders = COLUMNS.map(col => `$${prefix}_${col}`);
-        tuples.push(`(${placeholders.join(', ')})`);
-        params[`${prefix}_ts`] = entry.ts;
-        params[`${prefix}_brand`] = entry.brand;
-        params[`${prefix}_family_id`] = entry.familyId;
-        params[`${prefix}_requester_user_id`] = entry.requesterUserId;
-        params[`${prefix}_tool_name`] = entry.toolName;
-        params[`${prefix}_args`] = JSON.stringify(entry.args);
-        params[`${prefix}_result_bytes`] = entry.resultBytes;
-        params[`${prefix}_result_row_count`] = entry.resultRowCount;
-        params[`${prefix}_latency_ms`] = entry.latencyMs;
-        params[`${prefix}_outcome`] = entry.outcome;
-        params[`${prefix}_error_message`] = entry.errorMessage;
-    });
-    const sql = `INSERT INTO tool_call_audit (${COLUMNS.join(', ')}) VALUES ${tuples.join(', ')}`;
-    await analytics.execute(sql, params);
-}
-//# sourceMappingURL=audit.js.map

package/dist/tools/audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/tools/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,yBAAyB,GAAG,IAAI,CAAA;AACtC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAElC,MAAM,OAAO,GAAG;IACd,IAAI;IACJ,OAAO;IACP,WAAW;IACX,mBAAmB;IACnB,WAAW;IACX,MAAM;IACN,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,SAAS;IACT,eAAe;CACP,CAAA;AAUV,MAAM,UAAU,iBAAiB,CAAC,GAA4B;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAA;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACrD,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,yBAAyB,CAAA;IACxE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAEzB,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,IAAI,KAAK,GAA0C,IAAI,CAAA;IACvD,IAAI,mBAAmB,GAAG,CAAC,CAAA;IAC3B,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,IAAI,MAAM,GAAG,KAAK,CAAA;IAElB,SAAS,WAAW;QAClB,IAAI,KAAK,IAAI,MAAM;YAAE,OAAM;QAC3B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YACvB,KAAK,OAAO,EAAE,CAAA;QAChB,CAAC,EAAE,eAAe,CAAC,CAAA;QACnB,8DAA8D;QAC9D,2CAA2C;QAC3C,IAAI,OAAQ,KAA2C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5E,KAA0C,CAAC,KAAK,EAAE,CAAA;QACrD,CAAC;IACH,CAAC;IAED,SAAS,eAAe;QACtB,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC/C,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBACtC,mBAAmB,GAAG,CAAC,CAAA;YACzB,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;gBACX,mBAAmB,IAAI,CAAC,CAAA;gBACxB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC/D,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE;oBACjC,GAAG,EAAE,MAAM;oBACX,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,mBAAmB;iBACpB,CAAC,CAAA;gBACF,IAAI,mBAAmB,IAAI,wBAAwB,EAAE,CAAC;oBACpD,MAAM,EAAE,KAAK,CAAC,yCAAyC,EAAE;wBACvD,WAAW,EAAE,KAAK,CAAC,MAAM;qBAC1B,CAAC,CAAA;oBACF,mBAAmB,GAAG,CAAC,CAAA;gBACzB,CAAC;qBACI,CAAC;oBACJ,4CAA4C;oBAC5C,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;oBACO,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO;QACL,MAAM,CAAC,KAAK;YACV,IAAI,CAAC,OAAO,IAAI,MAAM;gBAAE,OAAM;YAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnB,WAAW,EAAE,CAAA;YACb,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAChC,KAAK,OAAO,EAAE,CAAA;YAChB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,OAAO;gBAAE,OAAM;YACpB,MAAM,OAAO,EAAE,CAAA;YACf,6DAA6D;YAC7D,+CAA+C;YAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,OAAO,EAAE,CAAA;YACjB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,IAAI,CAAA;YACb,eAAe,EAAE,CAAA;YACjB,IAAI,CAAC,OAAO;gBAAE,OAAM;YACpB,MAAM,OAAO,EAAE,CAAA;YACf,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,OAAO,EAAE,CAAA;YACjB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,KAAmB;IAEnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAE9B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;QACtB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAA;QACjC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAA;QACvC,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9C,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,KAAK,CAAC,eAAe,CAAA;QAC7D,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9C,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,GAAG,KAAK,CAAC,WAAW,CAAA;QACpD,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAA;QAC3D,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,KAAK,CAAC,SAAS,CAAA;QAChD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,CAAA;QAC3C,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,MAAM,GAAG,GACL,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;IAErF,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACtC,CAAC"}

package/dist/tools/authorize.d.ts

@@ -1,36 +0,0 @@
-/**
- * Authorize hooks for analytics tools.
- *
- * `familyScopeAuthorize` — grants access iff `args.userId` is either
- * the requester themselves or another member of the requester's
- * family. When `config.familyMembersProvider` is supplied (the
- * factory path since T-11), membership resolves via that provider;
- * otherwise the legacy SQL path against a `family_member` table is
- * used (kept for standalone hook usage and backwards compat).
- *
- * Both hooks fail closed on any error — provider throws, engine
- * throws, missing/malformed args — return `false` rather than
- * surfacing the error to the LLM.
- */
-import type { AnalyticsEngine, FamilyMembersProvider } from '../core/types';
-import type { AuthorizeFn } from './types';
-export interface AuthorizeConfig {
-    /**
-     * When present, membership is resolved via the provider instead of
-     * SQL. This is the path wired by `createAnalyticsTools`.
-     */
-    familyMembersProvider?: FamilyMembersProvider;
-}
-export declare function familyScopeAuthorize(analytics: AnalyticsEngine, config?: AuthorizeConfig): AuthorizeFn;
-/**
- * `orgScopeAuthorize` — parity with family scope but against an
- * `org_member` table. Orgs are not first-class in v0.1.0; the ctx
- * `familyId` is treated as the org id until org membership is wired
- * through `RequestContext`.
- *
- * When `familyMembersProvider` is supplied, the same provider is
- * consulted (v0.1.0 shim — a dedicated `orgMembersProvider` will
- * split out once orgs land).
- */
-export declare function orgScopeAuthorize(analytics: AnalyticsEngine, config?: AuthorizeConfig): AuthorizeFn;
-//# sourceMappingURL=authorize.d.ts.map

package/dist/tools/authorize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/tools/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;CAC9C;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,eAAe,EAC1B,MAAM,GAAE,eAAoB,GAC3B,WAAW,CAmCb;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,eAAe,EAC1B,MAAM,GAAE,eAAoB,GAC3B,WAAW,CAmCb"}

package/dist/tools/authorize.js

@@ -1,87 +0,0 @@
-/**
- * Authorize hooks for analytics tools.
- *
- * `familyScopeAuthorize` — grants access iff `args.userId` is either
- * the requester themselves or another member of the requester's
- * family. When `config.familyMembersProvider` is supplied (the
- * factory path since T-11), membership resolves via that provider;
- * otherwise the legacy SQL path against a `family_member` table is
- * used (kept for standalone hook usage and backwards compat).
- *
- * Both hooks fail closed on any error — provider throws, engine
- * throws, missing/malformed args — return `false` rather than
- * surfacing the error to the LLM.
- */
-export function familyScopeAuthorize(analytics, config = {}) {
-    return async (_toolName, args, ctx) => {
-        const targetUserId = args.userId;
-        if (typeof targetUserId !== 'string' || targetUserId.length === 0) {
-            return false;
-        }
-        if (targetUserId === ctx.requesterUserId) {
-            return true;
-        }
-        if (config.familyMembersProvider) {
-            try {
-                const members = await config.familyMembersProvider({
-                    brand: ctx.brand,
-                    familyId: ctx.familyId,
-                });
-                return members.includes(targetUserId);
-            }
-            catch {
-                return false;
-            }
-        }
-        try {
-            const rows = await analytics.execute('SELECT 1 AS one FROM family_member '
-                + 'WHERE family_id = $familyId AND user_id = $userId LIMIT 1', { familyId: ctx.familyId, userId: targetUserId });
-            return rows.length > 0;
-        }
-        catch {
-            return false;
-        }
-    };
-}
-/**
- * `orgScopeAuthorize` — parity with family scope but against an
- * `org_member` table. Orgs are not first-class in v0.1.0; the ctx
- * `familyId` is treated as the org id until org membership is wired
- * through `RequestContext`.
- *
- * When `familyMembersProvider` is supplied, the same provider is
- * consulted (v0.1.0 shim — a dedicated `orgMembersProvider` will
- * split out once orgs land).
- */
-export function orgScopeAuthorize(analytics, config = {}) {
-    return async (_toolName, args, ctx) => {
-        const targetUserId = args.userId;
-        if (typeof targetUserId !== 'string' || targetUserId.length === 0) {
-            return false;
-        }
-        if (targetUserId === ctx.requesterUserId) {
-            return true;
-        }
-        if (config.familyMembersProvider) {
-            try {
-                const members = await config.familyMembersProvider({
-                    brand: ctx.brand,
-                    familyId: ctx.familyId,
-                });
-                return members.includes(targetUserId);
-            }
-            catch {
-                return false;
-            }
-        }
-        try {
-            const rows = await analytics.execute('SELECT 1 AS one FROM org_member '
-                + 'WHERE org_id = $orgId AND user_id = $userId LIMIT 1', { orgId: ctx.familyId, userId: targetUserId });
-            return rows.length > 0;
-        }
-        catch {
-            return false;
-        }
-    };
-}
-//# sourceMappingURL=authorize.js.map

package/dist/tools/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/tools/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,MAAM,UAAU,oBAAoB,CAClC,SAA0B,EAC1B,SAA0B,EAAE;IAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAA;QAChC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,YAAY,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;oBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC,CAAA;gBACF,OAAO,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,CAAC;gBACL,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAClC,qCAAqC;kBACnC,2DAA2D,EAC7D,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CACjD,CAAA;YACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,CAAC;YACL,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAA0B,EAC1B,SAA0B,EAAE;IAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAA;QAChC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,YAAY,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;oBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC,CAAA;gBACF,OAAO,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,CAAC;gBACL,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAClC,kCAAkC;kBAChC,qDAAqD,EACvD,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAC9C,CAAA;YACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,CAAC;YACL,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/tools/budget.d.ts

@@ -1,15 +0,0 @@
-/**
- * Output budget enforcement for tool results.
- *
- * `applyOutputBudget` truncates `ToolResult.text` when its UTF-8
- * byte size exceeds `budget.maxBytes`, appending a `\n[truncated]`
- * suffix. Truncation is UTF-8-safe: bytes are sliced and re-decoded
- * with `fatal: false` so any partial multi-byte codepoint at the
- * boundary is dropped rather than emitting invalid sequences.
- *
- * `budget.maxRows` is informational — tool impls limit row count
- * via SQL LIMIT. This helper does not attempt row-level truncation.
- */
-import type { OutputBudget, ToolResult } from './types';
-export declare function applyOutputBudget(result: ToolResult, budget: OutputBudget): ToolResult;
-//# sourceMappingURL=budget.d.ts.map

package/dist/tools/budget.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/tools/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAIvD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,YAAY,GACnB,UAAU,CAiBZ"}