@mongrov/analytics 0.1.0-alpha.8 → 0.1.0-beta.0

package/dist/tools/mcp/server.js

@@ -0,0 +1,70 @@
+/**
+ * `createMcpServer` — wrap an `AnalyticsToolsHandle` in an MCP server
+ * that speaks `tools/list` + `tools/call` to any MCP client.
+ *
+ * We use the low-level `Server` + `setRequestHandler` rather than the
+ * higher-level `McpServer.registerTool`, because `registerTool` wants
+ * either a Zod raw shape or an `AnySchema`, and our tools were built
+ * around `zod.object(...)` (not raw shapes) and are already converted
+ * to JSON Schema by `toMcpTools`. Emitting the pre-baked JSON Schema
+ * from `tools/list` keeps the source of truth in one place (the Zod
+ * schemas in `src/tools/impls/*.ts`).
+ *
+ * `call_tool` re-dispatches into the wrapped `tool.execute`, which
+ * runs the full rate → auth → execute → budget → audit chain via the
+ * ctx container the handle owns. `handle.setContext(...)` before an
+ * MCP session behaves identically to setting it before an AI SDK turn.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { toMcpTools } from './adapter';
+export function createMcpServer(config) {
+    const mcpTools = toMcpTools(config.toolsHandle);
+    const byName = new Map(mcpTools.map(t => [t.name, t]));
+    const server = new Server({
+        name: config.name ?? 'mongrov-analytics',
+        version: config.version ?? '0.1.0',
+    }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: mcpTools.map(t => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+        })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const tool = byName.get(req.params.name);
+        if (!tool) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: `Unknown tool: ${req.params.name}`,
+                    }],
+                isError: true,
+            };
+        }
+        try {
+            return await tool.handler(req.params.arguments ?? {});
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            config.logger?.error('mcp tool handler threw', {
+                toolName: req.params.name,
+                err: message,
+            });
+            return {
+                content: [{
+                        type: 'text',
+                        text: `Tool call failed.`,
+                    }],
+                isError: true,
+            };
+        }
+    });
+    return {
+        server,
+        connect: transport => server.connect(transport),
+        close: () => server.close(),
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/tools/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/tools/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAElE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAA;AAG3C,OAAO,EAAgB,UAAU,EAAE,MAAM,WAAW,CAAA;AAoBpD,MAAM,UAAU,eAAe,CAC7B,MAA6B;IAE7B,MAAM,QAAQ,GAAc,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAAA;IAE/D,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,mBAAmB;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;KACnC,EACD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAA;IAED,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAId;SACF,CAAC,CAAC;KACJ,CAAC,CAAC,CAAA;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;qBACzC,CAAC;gBACF,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,wBAAwB,EAAE;gBAC7C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBACzB,GAAG,EAAE,OAAO;aACb,CAAC,CAAA;YACF,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,mBAAmB;qBAC1B,CAAC;gBACF,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/C,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAA;AACH,CAAC"}

package/dist/tools/mcp/transports/http.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `createHttpTransport` — Node HTTP transport for `createMcpServer`.
+ *
+ * Boots a bare `node:http` server that gates requests behind an
+ * optional bearer token, then hands them to the SDK's
+ * `StreamableHTTPServerTransport`. Runs in stateless mode
+ * (no `sessionIdGenerator`) — every request is self-contained, which
+ * matches how our tools are already wired (`handle.setContext(...)`
+ * carries the per-user scope, not the transport).
+ *
+ * Deliberately minimal:
+ *   - one path (default `/mcp`)
+ *   - one method (POST + GET both dispatched to the SDK)
+ *   - bearer via `Authorization: Bearer <token>`, constant-time cmp
+ *   - unauthenticated boot logs a warn but is allowed for local dev
+ *
+ * Meaningful only under Node; RN builds should never import this
+ * module — the guard + `sideEffects: false` keep it out of prod
+ * bundles.
+ *
+ * Callers wire it as:
+ *   const t = await createHttpTransport({ port: 8787, authToken: 'x' })
+ *   await mcpServer.connect(t.transport)
+ *   // ...
+ *   await t.close()
+ */
+import type { Server as HttpServer } from 'node:http';
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import type { ToolsLogger } from '../../types';
+export interface CreateHttpTransportConfig {
+    /** Listening port. `0` picks an ephemeral port (tests). Default `0`. */
+    port?: number;
+    /** URL path. Default `/mcp`. */
+    path?: string;
+    /**
+     * Optional bearer token. If set, incoming requests must present
+     * `Authorization: Bearer <authToken>` or get a 401. If unset, all
+     * requests pass — logged as a warn on boot.
+     */
+    authToken?: string;
+    logger?: ToolsLogger;
+}
+export interface HttpTransportHandle {
+    /** The SDK transport — hand to `mcpServer.connect(...)`. */
+    transport: Transport;
+    /** The Node HTTP server — exposed for advanced callers. */
+    server: HttpServer;
+    /** Actual listening port (resolved when `port: 0`). */
+    port: number;
+    /** Shut down the HTTP server + transport. */
+    close: () => Promise<void>;
+}
+export declare function createHttpTransport(config?: CreateHttpTransportConfig): Promise<HttpTransportHandle>;
+//# sourceMappingURL=http.d.ts.map

package/dist/tools/mcp/transports/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../../src/tools/mcp/transports/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAmB,MAAM,IAAI,UAAU,EAAkB,MAAM,WAAW,CAAA;AAItF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,yBAAyB;IACxC,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,SAAS,EAAE,SAAS,CAAA;IACpB,2DAA2D;IAC3D,MAAM,EAAE,UAAU,CAAA;IAClB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,6CAA6C;IAC7C,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAgCD,wBAAsB,mBAAmB,CACvC,MAAM,GAAE,yBAA8B,GACrC,OAAO,CAAC,mBAAmB,CAAC,CAkF9B"}

package/dist/tools/mcp/transports/http.js

@@ -0,0 +1,133 @@
+/**
+ * `createHttpTransport` — Node HTTP transport for `createMcpServer`.
+ *
+ * Boots a bare `node:http` server that gates requests behind an
+ * optional bearer token, then hands them to the SDK's
+ * `StreamableHTTPServerTransport`. Runs in stateless mode
+ * (no `sessionIdGenerator`) — every request is self-contained, which
+ * matches how our tools are already wired (`handle.setContext(...)`
+ * carries the per-user scope, not the transport).
+ *
+ * Deliberately minimal:
+ *   - one path (default `/mcp`)
+ *   - one method (POST + GET both dispatched to the SDK)
+ *   - bearer via `Authorization: Bearer <token>`, constant-time cmp
+ *   - unauthenticated boot logs a warn but is allowed for local dev
+ *
+ * Meaningful only under Node; RN builds should never import this
+ * module — the guard + `sideEffects: false` keep it out of prod
+ * bundles.
+ *
+ * Callers wire it as:
+ *   const t = await createHttpTransport({ port: 8787, authToken: 'x' })
+ *   await mcpServer.connect(t.transport)
+ *   // ...
+ *   await t.close()
+ */
+import { timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+const UNAUTHORIZED_BODY = 'Unauthorized\n';
+const NOT_FOUND_BODY = 'Not Found\n';
+function bearerMatches(header, expected) {
+    if (!header || !header.startsWith('Bearer '))
+        return false;
+    const presented = header.slice('Bearer '.length);
+    const a = Buffer.from(presented);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+async function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (c) => chunks.push(c));
+        req.on('end', () => {
+            if (chunks.length === 0)
+                return resolve(undefined);
+            const raw = Buffer.concat(chunks).toString('utf8');
+            try {
+                resolve(raw.length > 0 ? JSON.parse(raw) : undefined);
+            }
+            catch (err) {
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+export async function createHttpTransport(config = {}) {
+    const port = config.port ?? 0;
+    const path = config.path ?? '/mcp';
+    const authToken = config.authToken;
+    if (!authToken) {
+        config.logger?.warn('MCP HTTP transport started without authToken — do not expose to untrusted networks');
+    }
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: undefined,
+    });
+    const server = createServer((req, res) => {
+        // Path check — only the configured path is dispatched.
+        const url = req.url ?? '';
+        const [reqPath] = url.split('?');
+        if (reqPath !== path) {
+            res.statusCode = 404;
+            res.setHeader('content-type', 'text/plain');
+            res.end(NOT_FOUND_BODY);
+            return;
+        }
+        // Bearer check.
+        if (authToken) {
+            const header = req.headers.authorization;
+            if (!bearerMatches(header, authToken)) {
+                res.statusCode = 401;
+                res.setHeader('content-type', 'text/plain');
+                res.setHeader('www-authenticate', 'Bearer');
+                res.end(UNAUTHORIZED_BODY);
+                return;
+            }
+        }
+        // Body parse (POST) then dispatch.
+        void (async () => {
+            try {
+                const body = req.method === 'POST' ? await readBody(req) : undefined;
+                await transport.handleRequest(req, res, body);
+            }
+            catch (err) {
+                config.logger?.error('MCP HTTP transport request handler threw', {
+                    err: err instanceof Error ? err.message : String(err),
+                });
+                if (!res.headersSent) {
+                    res.statusCode = 500;
+                    res.setHeader('content-type', 'text/plain');
+                    res.end('Internal Server Error\n');
+                }
+                else {
+                    res.end();
+                }
+            }
+        })();
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    const resolvedPort = address?.port ?? port;
+    return {
+        transport,
+        server,
+        port: resolvedPort,
+        close: async () => {
+            await new Promise((resolve) => {
+                server.close(() => resolve());
+            });
+            await transport.close();
+        },
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/tools/mcp/transports/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../../src/tools/mcp/transports/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AA6BlG,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAC1C,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC,SAAS,aAAa,CAAC,MAA0B,EAAE,QAAgB;IACjE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAClD,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACvD,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAoC,EAAE;IAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAA;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAElC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,EAAE,IAAI,CACjB,oFAAoF,CACrF,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,SAAS;KAC9B,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,uDAAuD;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAA;QACzB,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;YAC3C,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YACvB,OAAM;QACR,CAAC;QAED,gBAAgB;QAChB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;YACxC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;gBAC3C,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;gBAC3C,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;gBAC1B,OAAM;YACR,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,0CAA0C,EAAE;oBAC/D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACtD,CAAC,CAAA;gBACF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;oBAC3C,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;gBACpC,CAAC;qBACI,CAAC;oBACJ,GAAG,CAAC,GAAG,EAAE,CAAA;gBACX,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3B,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAA;IACtD,MAAM,YAAY,GAAG,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;IAE1C,OAAO;QACL,SAAS;QACT,MAAM;QACN,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/B,CAAC,CAAC,CAAA;YACF,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tools/mcp/transports/stdio.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `createStdioTransport` — Node stdio transport for `createMcpServer`.
+ *
+ * Reads MCP framed messages off `process.stdin` and writes them to
+ * `process.stdout`. Meaningful only under Node; on Hermes there is no
+ * stdio pipe. Callers should gate construction behind
+ * `shouldStartMcpServer()` so this module is never imported in prod
+ * RN builds (and its `node:stream` peer disappears with the rest of
+ * the MCP subpath under `sideEffects: false`).
+ *
+ * The SDK's `StdioServerTransport` accepts optional `stdin` / `stdout`
+ * streams; we expose the same knobs for tests that want to pipe
+ * fixtures without touching real stdio.
+ */
+import type { Readable, Writable } from 'node:stream';
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+export interface CreateStdioTransportOptions {
+    stdin?: Readable;
+    stdout?: Writable;
+}
+export declare function createStdioTransport(options?: CreateStdioTransportOptions): Transport;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/tools/mcp/transports/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../../src/tools/mcp/transports/stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AAE9E,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,MAAM,CAAC,EAAE,QAAQ,CAAA;CAClB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,2BAAgC,GACxC,SAAS,CAEX"}

package/dist/tools/mcp/transports/stdio.js

@@ -0,0 +1,19 @@
+/**
+ * `createStdioTransport` — Node stdio transport for `createMcpServer`.
+ *
+ * Reads MCP framed messages off `process.stdin` and writes them to
+ * `process.stdout`. Meaningful only under Node; on Hermes there is no
+ * stdio pipe. Callers should gate construction behind
+ * `shouldStartMcpServer()` so this module is never imported in prod
+ * RN builds (and its `node:stream` peer disappears with the rest of
+ * the MCP subpath under `sideEffects: false`).
+ *
+ * The SDK's `StdioServerTransport` accepts optional `stdin` / `stdout`
+ * streams; we expose the same knobs for tests that want to pipe
+ * fixtures without touching real stdio.
+ */
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+export function createStdioTransport(options = {}) {
+    return new StdioServerTransport(options.stdin, options.stdout);
+}
+//# sourceMappingURL=stdio.js.map

package/dist/tools/mcp/transports/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../../src/tools/mcp/transports/stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAQhF,MAAM,UAAU,oBAAoB,CAClC,UAAuC,EAAE;IAEzC,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;AAChE,CAAC"}

package/dist/tools/rate-limit.d.ts

@@ -0,0 +1,26 @@
+/**
+ * In-memory token-bucket rate limiter for analytics tools.
+ *
+ * Three independent buckets per `(toolName, userId)`:
+ *   - per-tool-per-minute
+ *   - per-tool-per-hour
+ *   - per-user-per-minute (across all tools)
+ *
+ * `check(toolName, userId)` refills every bucket by elapsed time,
+ * then attempts to spend one token from all three. If any lacks a
+ * token, returns `false` **without** spending from the others.
+ * Otherwise deducts one from each and returns `true`.
+ *
+ * Persistence is out of scope for v0.1.0 — process restart resets
+ * buckets. Audit persistence (T-09) handles the durable trail.
+ */
+import { type RateLimitConfig } from './types';
+export interface RateLimiter {
+    check: (toolName: string, userId: string) => boolean;
+}
+export interface CreateRateLimiterConfig {
+    config?: RateLimitConfig;
+    clock?: () => number;
+}
+export declare function createRateLimiter(cfg?: CreateRateLimiterConfig): RateLimiter;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/tools/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/tools/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AAUlE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB;AAKD,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,uBAA4B,GAChC,WAAW,CA6Eb"}

package/dist/tools/rate-limit.js

@@ -0,0 +1,67 @@
+/**
+ * In-memory token-bucket rate limiter for analytics tools.
+ *
+ * Three independent buckets per `(toolName, userId)`:
+ *   - per-tool-per-minute
+ *   - per-tool-per-hour
+ *   - per-user-per-minute (across all tools)
+ *
+ * `check(toolName, userId)` refills every bucket by elapsed time,
+ * then attempts to spend one token from all three. If any lacks a
+ * token, returns `false` **without** spending from the others.
+ * Otherwise deducts one from each and returns `true`.
+ *
+ * Persistence is out of scope for v0.1.0 — process restart resets
+ * buckets. Audit persistence (T-09) handles the durable trail.
+ */
+import { DEFAULT_RATE_LIMIT } from './types';
+const MS_PER_MINUTE = 60000;
+const MS_PER_HOUR = 3600000;
+export function createRateLimiter(cfg = {}) {
+    const rl = cfg.config ?? DEFAULT_RATE_LIMIT;
+    const clock = cfg.clock ?? Date.now;
+    const perToolMinute = new Map();
+    const perToolHour = new Map();
+    const perUserMinute = new Map();
+    function getOrCreate(map, key, capacity, windowMs, now) {
+        let b = map.get(key);
+        if (!b) {
+            b = {
+                tokens: capacity,
+                lastRefillMs: now,
+                capacity,
+                refillPerMs: capacity / windowMs,
+            };
+            map.set(key, b);
+        }
+        return b;
+    }
+    function refill(b, now) {
+        const elapsed = now - b.lastRefillMs;
+        if (elapsed <= 0)
+            return;
+        b.tokens = Math.min(b.capacity, b.tokens + elapsed * b.refillPerMs);
+        b.lastRefillMs = now;
+    }
+    return {
+        check(toolName, userId) {
+            const now = clock();
+            const toolKey = `${toolName}:${userId}`;
+            const userKey = userId;
+            const tm = getOrCreate(perToolMinute, toolKey, rl.perToolPerMinute, MS_PER_MINUTE, now);
+            const th = getOrCreate(perToolHour, toolKey, rl.perToolPerHour, MS_PER_HOUR, now);
+            const um = getOrCreate(perUserMinute, userKey, rl.perUserPerMinute, MS_PER_MINUTE, now);
+            refill(tm, now);
+            refill(th, now);
+            refill(um, now);
+            if (tm.tokens < 1 || th.tokens < 1 || um.tokens < 1) {
+                return false;
+            }
+            tm.tokens -= 1;
+            th.tokens -= 1;
+            um.tokens -= 1;
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/tools/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/tools/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,kBAAkB,EAAwB,MAAM,SAAS,CAAA;AAmBlE,MAAM,aAAa,GAAG,KAAM,CAAA;AAC5B,MAAM,WAAW,GAAG,OAAS,CAAA;AAE7B,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAAE;IAEjC,MAAM,EAAE,GAAoB,GAAG,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IAEnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAA;IAClD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IAEpD,SAAS,WAAW,CAClB,GAA6B,EAC7B,GAAW,EACX,QAAgB,EAChB,QAAgB,EAChB,GAAW;QAEX,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG;gBACF,MAAM,EAAE,QAAQ;gBAChB,YAAY,EAAE,GAAG;gBACjB,QAAQ;gBACR,WAAW,EAAE,QAAQ,GAAG,QAAQ;aACjC,CAAA;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,SAAS,MAAM,CAAC,CAAc,EAAE,GAAW;QACzC,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,CAAA;QACpC,IAAI,OAAO,IAAI,CAAC;YAAE,OAAM;QACxB,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,CAAA;QACnE,CAAC,CAAC,YAAY,GAAG,GAAG,CAAA;IACtB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,EAAE,MAAM;YACpB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;YACnB,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAA;YACvC,MAAM,OAAO,GAAG,MAAM,CAAA;YAEtB,MAAM,EAAE,GAAG,WAAW,CACpB,aAAa,EACb,OAAO,EACP,EAAE,CAAC,gBAAgB,EACnB,aAAa,EACb,GAAG,CACJ,CAAA;YACD,MAAM,EAAE,GAAG,WAAW,CACpB,WAAW,EACX,OAAO,EACP,EAAE,CAAC,cAAc,EACjB,WAAW,EACX,GAAG,CACJ,CAAA;YACD,MAAM,EAAE,GAAG,WAAW,CACpB,aAAa,EACb,OAAO,EACP,EAAE,CAAC,gBAAgB,EACnB,aAAa,EACb,GAAG,CACJ,CAAA;YAED,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACf,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACf,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAEf,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAA;YACd,CAAC;YAED,EAAE,CAAC,MAAM,IAAI,CAAC,CAAA;YACd,EAAE,CAAC,MAAM,IAAI,CAAC,CAAA;YACd,EAAE,CAAC,MAAM,IAAI,CAAC,CAAA;YACd,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Public type surface for @mongrov/analytics/tools.
+ *
+ * Types shared across tool impls, rate limiter, authorize hooks,
+ * audit writer, wrapper, and the top-level factory.
+ */
+import type { AnalyticsEngine, FamilyMembersProvider } from '../core/types';
+/** Runtime context threaded through every tool impl and authorize hook. */
+export interface ToolContext {
+    readonly requesterUserId: string;
+    readonly brand: string;
+    readonly familyId: string;
+    readonly now?: () => Date;
+}
+/** Bounded text summary returned by every tool impl. */
+export interface ToolResult {
+    readonly text: string;
+    readonly rowCount: number;
+    readonly bytes: number;
+}
+/**
+ * Authorization hook — invoked before every tool execute. `false`
+ * rejects the call before SQL runs. Toolname passes through so hooks
+ * can gate by tool identity in addition to args + ctx.
+ */
+export type AuthorizeFn = (toolName: string, args: Record<string, unknown>, ctx: ToolContext) => Promise<boolean>;
+/**
+ * Token-bucket rate-limit ceilings. Defaults come from
+ * `analytics-ai-tools/spec.md` §Rate limiting.
+ */
+export interface RateLimitConfig {
+    perToolPerMinute: number;
+    perToolPerHour: number;
+    perUserPerMinute: number;
+}
+export declare const DEFAULT_RATE_LIMIT: RateLimitConfig;
+export interface ToolsLogger {
+    debug: (message: string, meta?: Record<string, unknown>) => void;
+    info: (message: string, meta?: Record<string, unknown>) => void;
+    warn: (message: string, meta?: Record<string, unknown>) => void;
+    error: (message: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * A tool impl. Takes a Zod-parsed input and the runtime context
+ * (augmented with the analytics engine), returns a bounded text
+ * result. `makeTool` (T-10) wraps this with rate → auth → execute →
+ * budget → audit chain to produce an AI SDK `tool()` handle.
+ */
+export type ToolImpl<Input> = (input: Input, ctx: ToolContext & {
+    analytics: AnalyticsEngine;
+}) => Promise<ToolResult>;
+/**
+ * Outcome recorded in `tool_call_audit.outcome`. Enum discipline —
+ * every wrapper code path resolves to exactly one of these.
+ */
+export type ToolOutcome = 'success' | 'rate_limited' | 'authorized_reject' | 'error';
+/**
+ * A single row destined for `tool_call_audit`. Column mapping (see
+ * `core/schemas.ts` line 189):
+ *   ts, brand, family_id, requester_user_id, tool_name, args,
+ *   result_bytes, result_row_count, latency_ms, outcome, error_message
+ */
+export interface AuditEntry {
+    readonly ts: Date;
+    readonly brand: string;
+    readonly familyId: string;
+    readonly requesterUserId: string;
+    readonly toolName: string;
+    readonly args: Record<string, unknown>;
+    readonly resultBytes: number | null;
+    readonly resultRowCount: number | null;
+    readonly latencyMs: number | null;
+    readonly outcome: ToolOutcome;
+    readonly errorMessage: string | null;
+}
+/**
+ * Batched writer for `tool_call_audit`. `record` is non-blocking —
+ * entries flush on batch-size or timer. `flush` and `close` are test
+ * hooks / graceful-shutdown hooks respectively.
+ */
+export interface AuditWriter {
+    record: (entry: AuditEntry) => void;
+    flush: () => Promise<void>;
+    close: () => Promise<void>;
+}
+/**
+ * Per-tool output ceiling enforced by `applyOutputBudget`. Text
+ * exceeding `maxBytes` is UTF-8-safely truncated with a
+ * `\n[truncated]` suffix. `maxRows` is informational — impls limit
+ * row count via SQL.
+ */
+export interface OutputBudget {
+    maxBytes: number;
+    maxRows: number;
+}
+export declare const DEFAULT_OUTPUT_BUDGET: OutputBudget;
+/**
+ * Config for `createAnalyticsTools` factory. All fields except
+ * `analytics` are optional with sane defaults from `spec.md`.
+ *
+ * - `rateLimit: false` disables the limiter entirely (tests only).
+ * - `authorize: undefined` defaults to `familyScopeAuthorize` wired
+ *   with `familyMembersProvider` if supplied.
+ * - `audit.enabled: false` makes `record` a no-op.
+ */
+export interface AnalyticsToolsConfig {
+    analytics: AnalyticsEngine;
+    authorize?: AuthorizeFn;
+    rateLimit?: RateLimitConfig | false;
+    audit?: {
+        enabled?: boolean;
+        batchSize?: number;
+        flushIntervalMs?: number;
+        retentionDays?: number;
+    };
+    outputBudget?: Partial<OutputBudget>;
+    logger?: ToolsLogger;
+    familyMembersProvider?: FamilyMembersProvider;
+    clock?: () => number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAE3E,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAIhC,CAAA;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAChE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CACjE;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,KAAK,IAAI,CAC5B,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,WAAW,GAAG;IAAE,SAAS,EAAE,eAAe,CAAA;CAAE,KAC9C,OAAO,CAAC,UAAU,CAAC,CAAA;AAExB;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,OAAO,CAAA;AAEX;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACnC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,qBAAqB,EAAE,YAGnC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,SAAS,CAAC,EAAE,eAAe,GAAG,KAAK,CAAA;IACnC,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,aAAa,CAAC,EAAE,MAAM,CAAA;KACvB,CAAA;IACD,YAAY,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB"}

package/dist/tools/types.js

@@ -0,0 +1,16 @@
+/**
+ * Public type surface for @mongrov/analytics/tools.
+ *
+ * Types shared across tool impls, rate limiter, authorize hooks,
+ * audit writer, wrapper, and the top-level factory.
+ */
+export const DEFAULT_RATE_LIMIT = {
+    perToolPerMinute: 20,
+    perToolPerHour: 200,
+    perUserPerMinute: 60,
+};
+export const DEFAULT_OUTPUT_BUDGET = {
+    maxBytes: 4096,
+    maxRows: 100,
+};
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,GAAG;IACnB,gBAAgB,EAAE,EAAE;CACrB,CAAA;AAwED,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,GAAG;CACb,CAAA"}

package/dist/tools/wrap.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `makeTool` — compose an AI SDK `tool()` from a raw impl plus the
+ * rate → auth → execute → budget → audit chain.
+ *
+ * The chain order is load-bearing:
+ *   1. Rate limit  → cheap, no I/O; short-circuits abusive callers.
+ *   2. Authorize   → may hit SQL/provider; runs after rate cap.
+ *   3. Execute     → real tool work.
+ *   4. Budget      → truncate oversized text before returning.
+ *   5. Audit       → record every terminal state (success / reject
+ *                    / rate-limited / error).
+ *
+ * Every branch records exactly one audit entry. The wrapper never
+ * throws — errors resolve to a short LLM-friendly string. Because
+ * the AI SDK `execute(input)` signature has no per-call context arg,
+ * the caller supplies a `ctxProvider()` closure that returns the
+ * current `ToolContext` at invocation time (the factory backs this
+ * with a mutable container updated per request).
+ */
+import type { ZodTypeAny } from 'zod';
+import type { AnalyticsEngine } from '../core/types';
+import type { RateLimiter } from './rate-limit';
+import type { AuditWriter, AuthorizeFn, OutputBudget, ToolContext, ToolImpl, ToolsLogger } from './types';
+export interface MakeToolConfig<Input> {
+    name: string;
+    description: string;
+    /**
+     * Accepts any Zod schema whose parsed output is assignable to
+     * `Input`. Widened to `ZodTypeAny` so schemas with `.default()` /
+     * `.optional()` fields (whose input types include `undefined`)
+     * still fit — the AI SDK's own `tool()` uses the same shape.
+     */
+    inputSchema: ZodTypeAny;
+    impl: ToolImpl<Input>;
+    analytics: AnalyticsEngine;
+    authorize?: AuthorizeFn;
+    rateLimiter?: RateLimiter | null;
+    audit: AuditWriter;
+    budget: OutputBudget;
+    logger?: ToolsLogger;
+    /**
+     * Returns the current `ToolContext` at execute-time. The factory
+     * backs this with a mutable container so a single tool handle
+     * threads per-request scope. Returning `null` triggers a clean
+     * error branch (no ctx → audit `error` outcome).
+     */
+    ctxProvider: () => ToolContext | null;
+    clock?: () => number;
+}
+export declare function makeTool<Input>(cfg: MakeToolConfig<Input>): import("ai").Tool<ZodTypeAny, string> & {
+    execute: (args: any, options: import("ai").ToolExecutionOptions) => PromiseLike<string>;
+};
+//# sourceMappingURL=wrap.d.ts.map

package/dist/tools/wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../src/tools/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAA;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,WAAW,EACZ,MAAM,SAAS,CAAA;AAOhB,MAAM,WAAW,cAAc,CAAC,KAAK;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,WAAW,EAAE,UAAU,CAAA;IACvB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrB,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAA;IAChC,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,WAAW,GAAG,IAAI,CAAA;IACrC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC;;EAqHzD"}