@mongrov/analytics 0.1.0-alpha.8 → 0.1.0-beta.0

package/dist/tools/wrap.js

@@ -0,0 +1,135 @@
+/**
+ * `makeTool` — compose an AI SDK `tool()` from a raw impl plus the
+ * rate → auth → execute → budget → audit chain.
+ *
+ * The chain order is load-bearing:
+ *   1. Rate limit  → cheap, no I/O; short-circuits abusive callers.
+ *   2. Authorize   → may hit SQL/provider; runs after rate cap.
+ *   3. Execute     → real tool work.
+ *   4. Budget      → truncate oversized text before returning.
+ *   5. Audit       → record every terminal state (success / reject
+ *                    / rate-limited / error).
+ *
+ * Every branch records exactly one audit entry. The wrapper never
+ * throws — errors resolve to a short LLM-friendly string. Because
+ * the AI SDK `execute(input)` signature has no per-call context arg,
+ * the caller supplies a `ctxProvider()` closure that returns the
+ * current `ToolContext` at invocation time (the factory backs this
+ * with a mutable container updated per request).
+ */
+import { tool } from 'ai';
+import { applyOutputBudget } from './budget';
+const RATE_LIMIT_MESSAGE = 'Rate limit exceeded. Try again shortly.';
+const AUTHZ_MESSAGE = 'Not authorized to access that user\'s data.';
+const ERROR_MESSAGE = 'Tool call failed.';
+const NO_CONTEXT_MESSAGE = 'Tool call failed: request context not set.';
+export function makeTool(cfg) {
+    const clock = cfg.clock ?? Date.now;
+    return tool({
+        description: cfg.description,
+        parameters: cfg.inputSchema,
+        execute: async (input) => {
+            const startMs = clock();
+            const ctx = cfg.ctxProvider();
+            // 0. Ctx guard — audit as error, no rate/auth/execute performed.
+            if (!ctx) {
+                cfg.audit.record({
+                    ts: new Date(clock()),
+                    brand: '',
+                    familyId: '',
+                    requesterUserId: '',
+                    toolName: cfg.name,
+                    args: input,
+                    resultBytes: null,
+                    resultRowCount: null,
+                    latencyMs: clock() - startMs,
+                    outcome: 'error',
+                    errorMessage: 'context not set',
+                });
+                cfg.logger?.warn('tool invoked without context', { toolName: cfg.name });
+                return NO_CONTEXT_MESSAGE;
+            }
+            // 1. Rate limit.
+            if (cfg.rateLimiter && !cfg.rateLimiter.check(cfg.name, ctx.requesterUserId)) {
+                cfg.audit.record({
+                    ts: new Date(clock()),
+                    brand: ctx.brand,
+                    familyId: ctx.familyId,
+                    requesterUserId: ctx.requesterUserId,
+                    toolName: cfg.name,
+                    args: input,
+                    resultBytes: null,
+                    resultRowCount: null,
+                    latencyMs: clock() - startMs,
+                    outcome: 'rate_limited',
+                    errorMessage: null,
+                });
+                return RATE_LIMIT_MESSAGE;
+            }
+            // 2. Authorize.
+            if (cfg.authorize) {
+                const ok = await cfg.authorize(cfg.name, input, ctx);
+                if (!ok) {
+                    cfg.audit.record({
+                        ts: new Date(clock()),
+                        brand: ctx.brand,
+                        familyId: ctx.familyId,
+                        requesterUserId: ctx.requesterUserId,
+                        toolName: cfg.name,
+                        args: input,
+                        resultBytes: null,
+                        resultRowCount: null,
+                        latencyMs: clock() - startMs,
+                        outcome: 'authorized_reject',
+                        errorMessage: null,
+                    });
+                    return AUTHZ_MESSAGE;
+                }
+            }
+            // 3. Execute + 4. Budget + 5. Audit success/error.
+            try {
+                const raw = await cfg.impl(input, {
+                    ...ctx,
+                    analytics: cfg.analytics,
+                });
+                const capped = applyOutputBudget(raw, cfg.budget);
+                cfg.audit.record({
+                    ts: new Date(clock()),
+                    brand: ctx.brand,
+                    familyId: ctx.familyId,
+                    requesterUserId: ctx.requesterUserId,
+                    toolName: cfg.name,
+                    args: input,
+                    resultBytes: capped.bytes,
+                    resultRowCount: capped.rowCount,
+                    latencyMs: clock() - startMs,
+                    outcome: 'success',
+                    errorMessage: null,
+                });
+                return capped.text;
+            }
+            catch (err) {
+                const errorMessage = err instanceof Error ? err.message : String(err);
+                cfg.audit.record({
+                    ts: new Date(clock()),
+                    brand: ctx.brand,
+                    familyId: ctx.familyId,
+                    requesterUserId: ctx.requesterUserId,
+                    toolName: cfg.name,
+                    args: input,
+                    resultBytes: null,
+                    resultRowCount: null,
+                    latencyMs: clock() - startMs,
+                    outcome: 'error',
+                    errorMessage,
+                });
+                cfg.logger?.warn('tool execution failed', {
+                    toolName: cfg.name,
+                    err: errorMessage,
+                });
+                return ERROR_MESSAGE;
+            }
+        },
+    });
+}
+//# sourceMappingURL=wrap.js.map

package/dist/tools/wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.js","sourceRoot":"","sources":["../../src/tools/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAGzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAW5C,MAAM,kBAAkB,GAAG,yCAAyC,CAAA;AACpE,MAAM,aAAa,GAAG,6CAA6C,CAAA;AACnE,MAAM,aAAa,GAAG,mBAAmB,CAAA;AACzC,MAAM,kBAAkB,GAAG,4CAA4C,CAAA;AA6BvE,MAAM,UAAU,QAAQ,CAAQ,GAA0B;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IAEnC,OAAO,IAAI,CAAC;QACV,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAY,EAAmB,EAAE;YAC/C,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;YACvB,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;YAE7B,iEAAiE;YACjE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBACf,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,KAAK,EAAE,EAAE;oBACT,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,EAAE;oBACnB,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,IAAI,EAAE,KAAgC;oBACtC,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO;oBAC5B,OAAO,EAAE,OAAO;oBAChB,YAAY,EAAE,iBAAiB;iBAChC,CAAC,CAAA;gBACF,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;gBACxE,OAAO,kBAAkB,CAAA;YAC3B,CAAC;YAED,iBAAiB;YACjB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBACf,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,eAAe,EAAE,GAAG,CAAC,eAAe;oBACpC,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,IAAI,EAAE,KAAgC;oBACtC,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO;oBAC5B,OAAO,EAAE,cAAc;oBACvB,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;gBACF,OAAO,kBAAkB,CAAA;YAC3B,CAAC;YAED,gBAAgB;YAChB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,SAAS,CAC5B,GAAG,CAAC,IAAI,EACR,KAAgC,EAChC,GAAG,CACJ,CAAA;gBACD,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;wBACf,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;wBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,eAAe,EAAE,GAAG,CAAC,eAAe;wBACpC,QAAQ,EAAE,GAAG,CAAC,IAAI;wBAClB,IAAI,EAAE,KAAgC;wBACtC,WAAW,EAAE,IAAI;wBACjB,cAAc,EAAE,IAAI;wBACpB,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO;wBAC5B,OAAO,EAAE,mBAAmB;wBAC5B,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAA;oBACF,OAAO,aAAa,CAAA;gBACtB,CAAC;YACH,CAAC;YAED,mDAAmD;YACnD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE;oBAChC,GAAG,GAAG;oBACN,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;gBACjD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBACf,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,eAAe,EAAE,GAAG,CAAC,eAAe;oBACpC,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,IAAI,EAAE,KAAgC;oBACtC,WAAW,EAAE,MAAM,CAAC,KAAK;oBACzB,cAAc,EAAE,MAAM,CAAC,QAAQ;oBAC/B,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO;oBAC5B,OAAO,EAAE,SAAS;oBAClB,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;gBACF,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACrE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBACf,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,eAAe,EAAE,GAAG,CAAC,eAAe;oBACpC,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,IAAI,EAAE,KAAgC;oBACtC,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO;oBAC5B,OAAO,EAAE,OAAO;oBAChB,YAAY;iBACb,CAAC,CAAA;gBACF,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE;oBACxC,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,GAAG,EAAE,YAAY;iBAClB,CAAC,CAAA;gBACF,OAAO,aAAa,CAAA;YACtB,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@mongrov/analytics",
-  "version": "0.1.0-alpha.8",
+  "version": "0.1.0-beta.0",
+  "sideEffects": false,
   "description": "DuckDB + R2 Iceberg local analytics for @mongrov apps",
   "license": "MIT",
   "repository": {
@@ -38,6 +39,11 @@
       "import": "./dist/tools/index.js",
       "default": "./dist/tools/index.js"
     },
+    "./tools/mcp": {
+      "types": "./dist/tools/mcp/index.d.ts",
+      "import": "./dist/tools/mcp/index.js",
+      "default": "./dist/tools/mcp/index.js"
+    },
     "./sync": {
       "types": "./dist/sync/index.d.ts",
       "import": "./dist/sync/index.js",
@@ -53,13 +59,18 @@
     "dist"
   ],
   "peerDependencies": {
+    "@modelcontextprotocol/sdk": ">=1.20.0",
     "@mongrov/types": "^0.4.0",
+    "ai": ">=4",
     "react": ">=19",
     "react-native": ">=0.81",
     "react-native-duckdb": ">=1.0.0",
     "@mongrov/db": "0.3.0"
   },
   "peerDependenciesMeta": {
+    "@modelcontextprotocol/sdk": {
+      "optional": true
+    },
     "react": {
       "optional": true
     },
@@ -74,12 +85,17 @@
     "@iarna/toml": "^2.2.5",
     "date-fns-tz": "^3.2.0",
     "p-queue": "^8.0.1",
-    "xstate": "^5.30.0"
+    "xstate": "^5.30.0",
+    "zod-to-json-schema": "^3.25.2"
   },
   "devDependencies": {
+    "@duckdb/node-api": "1.5.4-r.1",
+    "@duckdb/node-bindings": "1.5.4-r.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@testing-library/react": "^14.3.1",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
+    "ai": "^4.3.0",
     "fast-check": "^4.9.0",
     "jsdom": "^25.0.1",
     "react": "^18.3.1",
@@ -87,8 +103,8 @@
     "typescript": "^5.9.3",
     "vitest": "^2.1.9",
     "zod": "^3.23.8",
-    "@mongrov/db": "0.3.0",
-    "@mongrov/types": "0.4.0"
+    "@mongrov/types": "0.4.0",
+    "@mongrov/db": "0.3.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
@@ -96,6 +112,7 @@
     "prebuild": "pnpm run clean",
     "test": "vitest run",
     "test:watch": "vitest",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
     "typecheck": "tsc --noEmit"
   }
 }